macOS Analysis Report
TheUnarchiver.dmg

Overview

General Information

Sample name: TheUnarchiver.dmg
Analysis ID: 1526118
MD5: 56d430f019e46c28e7fa82d075bcfe2e
SHA1: 7c07e762d0dae4f6b77a2ec2f6101c2c17083b50
SHA256: 4f42f9edec0bf2c26538a3e49a9d6202cb52d808775180d0d0089f9e65dc9fb0
Infos:

Detection

Score: 5
Range: 0 - 100
Whitelisted: false

Signatures

Contains symbols with suspicious names likely related to networking
Creates hidden files, links and/or directories
Document contains embedded VBA macros
Document misses a certain OLE stream usually present in this Microsoft Office document type
Executes the "defaults" command used to read or modify user specific settings
Reads hardware related sysctl values
Reads launchservices plist files
Reads the sysctl safe boot value (probably to check if the system is in safe boot mode)
Reads the systems OS release and/or type
Reads the systems hostname
Reads user launchservices plist file containing default apps for corresponding file types

Classification

Source: unknown HTTPS traffic detected: 17.253.3.196:443 -> 192.168.11.12:49352 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49380 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49382 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.8:443 -> 192.168.11.12:49383 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.8:443 -> 192.168.11.12:49385 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49388 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49384 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49389 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49391 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49394 version: TLS 1.2
Source: unknown HTTPS traffic detected: 172.64.147.102:443 -> 192.168.11.12:49395 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.18.38.206:443 -> 192.168.11.12:49396 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.218.152.144:443 -> 192.168.11.12:49399 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49407 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49408 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49409 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49410 version: TLS 1.2
Contains symbols with suspicious names likely related to networking
Source: extracted file from submission: The Unarchiver.app/Contents/MacOS/The Unarchiver Mach-O symbol: _OBJC_CLASS_$_NSHTTPURLResponse
Source: extracted file from submission: The Unarchiver.app/Contents/MacOS/The Unarchiver Mach-O symbol: _NSSearchPathForDirectoriesInDomains
Source: extracted file from submission: The Unarchiver.app/Contents/MacOS/The Unarchiver Mach-O symbol: _OBJC_CLASS_$_NSURLConnection
Source: extracted file from submission: The Unarchiver.app/Contents/MacOS/The Unarchiver Mach-O symbol: _OBJC_CLASS_$_NSHTTPURLResponse
Source: extracted file from submission: The Unarchiver.app/Contents/MacOS/The Unarchiver Mach-O symbol: _NSSearchPathForDirectoriesInDomains
Source: extracted file from submission: The Unarchiver.app/Contents/MacOS/The Unarchiver Mach-O symbol: _OBJC_CLASS_$_NSURLConnection
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.248.199.70
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.248.199.70
Source: unknown TCP traffic detected without corresponding DNS query: 17.248.199.70
Source: unknown TCP traffic detected without corresponding DNS query: 17.248.199.70
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.253.3.196
Source: unknown TCP traffic detected without corresponding DNS query: 104.76.101.13
Source: unknown TCP traffic detected without corresponding DNS query: 104.76.101.13
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET /2021/mobileassets/041-40471/B96AF6E1-5FF6-4786-9956-944A1AFE086A/com_apple_MobileAsset_KextDenyList/404087a7302927411b6ea0e05114d2c68355185e.zip HTTP/1.1Host: updates.cdn-apple.comAccept: */*Accept-Language: en-usConnection: keep-aliveAccept-Encoding: br, gzip, deflateUser-Agent: mobileassetd (unknown version) CFNetwork/976 Darwin/18.2.0 (x86_64)
Source: global traffic HTTP traffic detected: GET /2024/patches/052-54451/D609556E-69B1-482E-9C33-B2E3510A1311/com_apple_MobileAsset_TimeZoneUpdate/c5a4d0df08e8faecf4faebbbadc4d96a07d9d990.zip HTTP/1.1Host: updates.cdn-apple.comAccept: */*Accept-Language: en-usConnection: keep-aliveAccept-Encoding: br, gzip, deflateUser-Agent: mobileassetd (unknown version) CFNetwork/976 Darwin/18.2.0 (x86_64)
Source: global traffic HTTP traffic detected: GET /2024/patches/062-08173/234EE7F7-CC33-4CD3-85FC-60590A103560/com_apple_MobileAsset_CoreSuggestions/84f6102e2a09dd10dd694d795792a7771b6014fc.zip HTTP/1.1Host: updates.cdn-apple.comAccept: */*Accept-Language: en-usConnection: keep-aliveAccept-Encoding: br, gzip, deflateUser-Agent: mobileassetd (unknown version) CFNetwork/976 Darwin/18.2.0 (x86_64)
Source: global traffic HTTP traffic detected: GET /com.macpaw.site.theunarchiver.xml HTTP/1.1Host: updates.devmate.comConnection: keep-alivedm-sysinfo: eyJkZXZpY2UiOiJNYWNtaW5pOCwxIiwiZ3B1IjpbeyJtb2RlbCI6IiIsInZyYW0iOjAsImluX3VzZSI6MX1dLCJvc19sb2NhbGUiOiJlbi1HQiIsInJhbSI6NDA5Niwib3NfYnVpbGQiOiIxOEM1NCIsImNwdSI6eyJjb3JlX2NvdW50IjoyLCJ0aHJlYWRfY291bnQiOjIsInR5cGUiOiJJbnRlbChSKSBDb3JlKFRNKSBpNS04NTAwQiBDUFUgQCAzLjAwR0h6IiwiZnJlcXVlbmN5IjozMDEwfSwib3NfdmVyc2lvbiI6IjEwLjE0LjIiLCJvc19mYW1pbHkiOiJPUyBYIn0%3Ddm-signature: NzE2OTE2ZmIyY2UwYjg5YjE4ODA2NzczZDQwNmI3M2M%3Ddm-appinfo: com.macpaw.site.theunarchiver%7C146%7CenAccept: application/rss+xml,*/*;q=0.1User-Agent: The Unarchiver/4.3.8 Sparkle/1.10.0Accept-Language: en-gbAccept-Encoding: br, gzip, deflatedm-identifier: AgECw6E7KsO9w6nDkkPDhMK0wo09MMKaRUnCr2Zhw6tKw43DsE4ywovDnGtAWxs2wrIBAAgAJ8OCwqXDicOA
Source: global traffic HTTP traffic detected: GET /updateinfo.devmate.com/com.macpaw.site.theunarchiver/updates.xml HTTP/1.1Host: s3-us-west-2.amazonaws.comConnection: keep-alivedm-sysinfo: eyJkZXZpY2UiOiJNYWNtaW5pOCwxIiwiZ3B1IjpbeyJtb2RlbCI6IiIsInZyYW0iOjAsImluX3VzZSI6MX1dLCJvc19sb2NhbGUiOiJlbi1HQiIsInJhbSI6NDA5Niwib3NfYnVpbGQiOiIxOEM1NCIsImNwdSI6eyJjb3JlX2NvdW50IjoyLCJ0aHJlYWRfY291bnQiOjIsInR5cGUiOiJJbnRlbChSKSBDb3JlKFRNKSBpNS04NTAwQiBDUFUgQCAzLjAwR0h6IiwiZnJlcXVlbmN5IjozMDEwfSwib3NfdmVyc2lvbiI6IjEwLjE0LjIiLCJvc19mYW1pbHkiOiJPUyBYIn0%3Ddm-signature: NzE2OTE2ZmIyY2UwYjg5YjE4ODA2NzczZDQwNmI3M2M%3Ddm-appinfo: com.macpaw.site.theunarchiver%7C146%7CenAccept: application/rss+xml,*/*;q=0.1User-Agent: The Unarchiver/4.3.8 Sparkle/1.10.0Accept-Language: en-gbAccept-Encoding: br, gzip, deflatedm-identifier: AgECw6E7KsO9w6nDkkPDhMK0wo09MMKaRUnCr2Zhw6tKw43DsE4ywovDnGtAWxs2wrIBAAgAJ8OCwqXDicOA
Source: global traffic DNS traffic detected: DNS query: api-lytics.macpaw.com
Source: global traffic DNS traffic detected: DNS query: updates.devmate.com
Source: global traffic DNS traffic detected: DNS query: s3-us-west-2.amazonaws.com
Source: global traffic DNS traffic detected: DNS query: h3.apis.apple.map.fastly.net
Source: unknown HTTP traffic detected: POST /actions HTTP/1.1Host: api-lytics.macpaw.comContent-Type: application/jsonConnection: keep-aliveAccept: */*User-Agent: The Unarchiver/4.3.8 (Macintosh; Intel Mac OS X 10_14_2)Content-Length: 332Accept-Language: en-gbAccept-Encoding: br, gzip, deflate
Source: The Unarchiver String found in binary or memory: http://certs.apple.com/devidg2.der02
Source: CodeResources String found in binary or memory: http://crl.apple.com/applerootcag3.crl0
Source: The Unarchiver, 00000649.00000313.1.000000010e196000.000000010e199000.r--.sdmp, The Unarchiver, 00000649.00000313.1.000000011a1dd000.000000011a206000.r--.sdmp String found in binary or memory: http://crl.apple.com/codesigning.crl0
Source: The Unarchiver String found in binary or memory: http://crl.apple.com/root.crl0
Source: The Unarchiver String found in binary or memory: http://crl.apple.com/timestamp.crl0
Source: The Unarchiver String found in binary or memory: http://ocsp.apple.com/ocsp03-applerootca0.
Source: CodeResources String found in binary or memory: http://ocsp.apple.com/ocsp03-applerootcag307
Source: CodeResources String found in binary or memory: http://ocsp.apple.com/ocsp03-asica4020
Source: The Unarchiver String found in binary or memory: http://ocsp.apple.com/ocsp03-devidg2010
Source: The Unarchiver, 00000649.00000313.1.000000010b577000.000000010b663000.r-x.sdmp String found in binary or memory: http://www.aladdinsys.com/StuffIt/
Source: The Unarchiver, 00000649.00000313.1.000000010b854000.000000010b8d8000.r-x.sdmp String found in binary or memory: http://www.andymatuschak.org/xml-namespaces/sparkle
Source: The Unarchiver, 00000649.00000313.1.000000010b854000.000000010b8d8000.r-x.sdmp String found in binary or memory: http://www.andymatuschak.org/xml-namespaces/sparkle-
Source: The Unarchiver, CodeResources String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd
Source: The Unarchiver, 00000649.00000313.1.000000010e196000.000000010e199000.r--.sdmp, The Unarchiver, 00000649.00000313.1.000000011a1dd000.000000011a206000.r--.sdmp String found in binary or memory: http://www.apple.com/appleca/root.crl0
Source: The Unarchiver String found in binary or memory: http://www.apple.com/appleca0
Source: The Unarchiver, 00000649.00000313.1.000000010e196000.000000010e199000.r--.sdmp, The Unarchiver, 00000649.00000313.1.000000011a1dd000.000000011a206000.r--.sdmp String found in binary or memory: http://www.apple.com/certificateauthority0
Source: The Unarchiver, 00000649.00000313.1.000000010df7e000.000000010e135000.r--.sdmp String found in binary or memory: http://www.apple.com/http://www.apple.com/Copyright
Source: The Unarchiver, 00000649.00000313.1.000000010b982000.000000010b99e000.r-x.sdmp String found in binary or memory: https://api-lytics.macpaw.com/actions
Source: The Unarchiver, 00000649.00000313.1.000000010b982000.000000010b99e000.r-x.sdmp String found in binary or memory: https://api-lytics.macpaw.com/actionsapplication/json
Source: The Unarchiver String found in binary or memory: https://api.macpaw.app/%
Source: The Unarchiver String found in binary or memory: https://api.macpaw.app/the_unarchiver_privacy_policy
Source: The Unarchiver String found in binary or memory: https://api.macpaw.app/the_unarchiver_survey
Source: The Unarchiver String found in binary or memory: https://api.macpaw.app/the_unarchiver_terms_of_use
Source: The Unarchiver, 00000649.00000313.1.000000010b854000.000000010b8d8000.r-x.sdmp String found in binary or memory: https://devmate.io/gostore
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/119/1527191272/TheUnarchiver-119.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/120/1528909123/119.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/120/1528909123/TheUnarchiver-120.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/121/1549634528/119.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/121/1549634528/120.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/121/1549634528/TheUnarchiver-121.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/126/1583396227/119.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/126/1583396227/120.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/126/1583396227/121.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/126/1583396227/TheUnarchiver-126.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/128/1586456379/120.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/128/1586456379/121.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/128/1586456379/126.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/128/1586456379/TheUnarchiver-128.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/129/1590582775/121.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/129/1590582775/126.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/129/1590582775/128.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/129/1590582775/TheUnarchiver-129.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/131/1605625663/126.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/131/1605625663/128.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/131/1605625663/129.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/131/1605625663/TheUnarchiver-131.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/132/1618399262/128.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/132/1618399262/129.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/132/1618399262/131.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/132/1618399262/TheUnarchiver-132.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/137/1646240113/129.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/137/1646240113/131.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/137/1646240113/132.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/137/1646240113/TheUnarchiver-137.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/139/1652457131/131.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/139/1652457131/132.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/139/1652457131/137.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/139/1652457131/TheUnarchiver-139.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/143/1697809946/132.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/143/1697809946/137.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/143/1697809946/139.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/143/1697809946/TheUnarchiver-143.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/145/1715684270/137.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/145/1715684270/139.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/145/1715684270/143.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/145/1715684270/TheUnarchiver-145.zip
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/146/1715865652/139.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/146/1715865652/143.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/146/1715865652/145.delta
Source: updates.xml.rss.313.dr String found in binary or memory: https://dl.devmate.com/com.macpaw.site.theunarchiver/146/1715865652/TheUnarchiver-146.zip
Source: The Unarchiver String found in binary or memory: https://macpaw.com/news/know-the-truth-about-Ukraine?utm_source=un&utm_medium=app&utm_campaign=un_2
Source: The Unarchiver String found in binary or memory: https://macpaw.com/news/macpaw-amidst-aggression?utm_source=un&utm_medium=app&utm_campaign=un_1
Source: The Unarchiver, 00000649.00000313.1.000000010b854000.000000010b8d8000.r-x.sdmp String found in binary or memory: https://sites.fastspring.com/%
Source: The Unarchiver, 00000649.00000313.1.000000010b854000.000000010b8d8000.r-x.sdmp String found in binary or memory: https://sparkle-project.org/documentation/app-transport-security/
Source: The Unarchiver, 00000649.00000313.1.000000010b854000.000000010b8d8000.r-x.sdmp String found in binary or memory: https://sparkle-project.org/documentation/app-transport-security/WARNING:
Source: The Unarchiver String found in binary or memory: https://tds2.macpaw.com/index.php?%li&action=%
Source: The Unarchiver String found in binary or memory: https://theunarchiver.com
Source: The Unarchiver String found in binary or memory: https://theunarchiver.com/api/subscribe
Source: The Unarchiver String found in binary or memory: https://theunarchiver.comAbout
Source: The Unarchiver, 00000649.00000313.1.000000010b854000.000000010b8d8000.r-x.sdmp String found in binary or memory: https://updates.devmate.com/%
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/119/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/bg/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/hu-HU/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/lv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/ru/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/120/zh-Hans/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/bg/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/hu-HU/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/lv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/ru/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/121/zh-Hans/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/hu-HU/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/ru/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/126/zh-Hans/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/hu-HU/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/ru/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/128/zh-Hans/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/es-MX/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/hu-HU/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/ru/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/129/zh-Hans/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/hu-HU/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/ru/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/131/zh-Hans/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/hu-HU/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/ru/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/132/zh-Hans/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/es-MX/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/hu-HU/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/ru/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/137/zh-Hans/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/es-MX/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/ru/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/139/zh-Hans/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/hu-HU/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/143/zh-Hans/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/hu-HU/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/145/zh-Hans/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/ar/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/cs/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/de/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/es/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/fr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/hu-HU/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/it/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/ja/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/nl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/no/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/pl/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/pt-BR/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/pt/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/sv/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/tr/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/uk/com.macpaw.site.theunarchiver.html
Source: updates.xml.rss.313.dr String found in binary or memory: https://updates.devmate.com/releasenotes/146/zh-Hans/com.macpaw.site.theunarchiver.html
Source: The Unarchiver String found in binary or memory: https://www.apple.com/appleca/0
Source: The Unarchiver String found in binary or memory: https://www.apple.com/certificateauthority/0
Source: unknown Network traffic detected: HTTP traffic on port 49399 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49410 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49347
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49389
Source: unknown Network traffic detected: HTTP traffic on port 49397 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49388
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49386
Source: unknown Network traffic detected: HTTP traffic on port 49408 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49385
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49384
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49383
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49382
Source: unknown Network traffic detected: HTTP traffic on port 49395 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49391 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49380
Source: unknown Network traffic detected: HTTP traffic on port 49386 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49388 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49384 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49380 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49382 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49409 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49352 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49398 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49399
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49410
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49398
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49397
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49352
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49396
Source: unknown Network traffic detected: HTTP traffic on port 49407 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49395
Source: unknown Network traffic detected: HTTP traffic on port 49394 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49394
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49391
Source: unknown Network traffic detected: HTTP traffic on port 49396 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49389 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49409
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49408
Source: unknown Network traffic detected: HTTP traffic on port 49347 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49407
Source: unknown Network traffic detected: HTTP traffic on port 49385 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49383 -> 443
Source: unknown HTTPS traffic detected: 17.253.3.196:443 -> 192.168.11.12:49352 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49380 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49382 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.8:443 -> 192.168.11.12:49383 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.8:443 -> 192.168.11.12:49385 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49388 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49384 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49389 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49391 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49394 version: TLS 1.2
Source: unknown HTTPS traffic detected: 172.64.147.102:443 -> 192.168.11.12:49395 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.18.38.206:443 -> 192.168.11.12:49396 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.218.152.144:443 -> 192.168.11.12:49399 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49407 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49408 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49409 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49410 version: TLS 1.2
Document contains embedded VBA macros
Source: updates.xml.rss.313.dr OLE indicator, VBA macros: true
Document misses a certain OLE stream usually present in this Microsoft Office document type
Source: updates.xml.rss.313.dr OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: classification engine Classification label: clean5.macDMG@0/6@4/0
Creates hidden files, links and/or directories
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) Hidden File created: /var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/T/.dat.nosync0289.J6bMym Jump to behavior
Reads launchservices plist files
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) Launchservices plist file read: /Users/bernard/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist Jump to behavior
Reads user launchservices plist file containing default apps for corresponding file types
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) Preferences launchservices plist file read: /Users/bernard/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist Jump to behavior
Source: extracted file from DMG submission CodeResources XML file: The Unarchiver.app/Contents/_CodeSignature/CodeResources
Source: extracted file from submission: The Unarchiver.app/Contents/MacOS/The Unarchiver Mach-O header: load_dylib -> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
Source: extracted file from submission: The Unarchiver.app/Contents/MacOS/The Unarchiver Mach-O header: load_dylib -> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
Source: extracted file from submission: The Unarchiver.app/Contents/MacOS/The Unarchiver Mach-O header: load_dylib -> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
Source: extracted file from submission: The Unarchiver.app/Contents/MacOS/The Unarchiver Mach-O header: load_dylib -> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
Source: /usr/libexec/firmwarecheckers/eficheck/eficheck (PID: 671) Random device file read: /dev/random Jump to behavior
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist Jump to behavior
Source: /usr/bin/defaults (PID: 653) Binary plist file created: /private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/T/.dat.nosync028d.vUQ3ER Jump to dropped file
Source: submission CodeSign Info: Executable=/Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: 5VirtualMachine
Source: The Unarchiver, 00000649.00000313.1.000000010b577000.000000010b663000.r-x.sdmp Binary or memory string: executeOnVirtualMachine:atPosition:
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: __OBJC_METACLASS_RO_$_XADRARVirtualMachine
Source: The Unarchiver, 00000649.00000313.1.000000010b577000.000000010b663000.r-x.sdmp Binary or memory string: XADRARVirtualMachine
Source: The Unarchiver, 00000649.00000313.1.000000010b577000.000000010b663000.r-x.sdmp Binary or memory string: @"XADRARVirtualMachine"
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRARVirtualMachine writeWordAtAddress:value:]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: __OBJC_$_INSTANCE_VARIABLES_XADRARVirtualMachine
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRARVirtualMachine memory]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: _RunVirtualMachineOrGetLabels.labels
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: _OBJC_METACLASS_$_XADRARVirtualMachine
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRARVirtualMachine setRegisters:]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: _InitializeRARVirtualMachine
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRARVirtualMachine executeProgramCode:]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: _OBJC_CLASS_$_XADRARVirtualMachine
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: VirtualMachine.vm
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: _RunVirtualMachineOrGetLabels
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRAR30DeltaFilter executeOnVirtualMachine:atPosition:]
Source: The Unarchiver, 00000649.00000313.1.000000010b577000.000000010b663000.r-x.sdmp Binary or memory string: {RARVirtualMachine="registers"[8I]"flags"I"memory"[262147C]}
Source: The Unarchiver, 00000649.00000313.1.000000010c445000.000000010c44b000.r--.sdmp Binary or memory string: framework.vmnet
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRAR30E8E9Filter executeOnVirtualMachine:atPosition:]
Source: The Unarchiver, 00000649.00000313.1.000000010c445000.000000010c44b000.r--.sdmp Binary or memory string: framework.vmnet$
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: _OBJC_IVAR_$_XADRARVirtualMachine.vm
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRAR30E8Filter executeOnVirtualMachine:atPosition:]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRARVirtualMachine writeMemoryAtAddress:length:fromData:]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRARVirtualMachine init]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRARVirtualMachine writeMemoryAtAddress:length:fromBuffer:]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRARVirtualMachine readWordAtAddress:]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRAR30AudioFilter executeOnVirtualMachine:atPosition:]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRARVirtualMachine dealloc]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRARVirtualMachine readMemoryAtAddress:length:toMutableData:]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: __OBJC_$_INSTANCE_METHODS_XADRARVirtualMachine
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: ARVirtualMachine
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRARVirtualMachine readMemoryAtAddress:length:toBuffer:]
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: __OBJC_CLASS_RO_$_XADRARVirtualMachine
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: VirtualMachine
Source: The Unarchiver, 00000649.00000313.1.000000010b6e9000.000000010b74a000.r--.sdmp Binary or memory string: -[XADRAR30Filter executeOnVirtualMachine:atPosition:]
Reads the sysctl safe boot value (probably to check if the system is in safe boot mode)
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) Sysctl read request: kern.safeboot (1.66) Jump to behavior
Reads hardware related sysctl values
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) Sysctl read request: hw.availcpu (6.25) Jump to behavior
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) Sysctl read request: hw.memsize (6.24) Jump to behavior
Reads the systems OS release and/or type
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) Sysctl requested: kern.ostype (1.1) Jump to behavior
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) Sysctl requested: kern.osrelease (1.2) Jump to behavior
Reads the systems hostname
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) Sysctl requested: kern.hostname (1.10) Jump to behavior
Source: /usr/bin/open (PID: 648) System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist Jump to behavior
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist Jump to behavior
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist Jump to behavior
Executes the "defaults" command used to read or modify user specific settings
Source: /Volumes/The Unarchiver/The Unarchiver.app/Contents/MacOS/The Unarchiver (PID: 649) Defaults executable: /usr/bin/defaults /usr/bin/defaults export /Users/bernard/Library/Preferences/cx.c3.theunarchiver.plist /var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/T/6D2735FF-07BA-4ED3-9368-82F0AA386F47.tmp.cx.c3.theunarchiver.plist Jump to behavior
cam-macmac-stand
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
104.76.101.13
 unknown United States
16625 AKAMAI-ASUS false
172.64.147.102
 api-lytics.macpaw.com United States
13335 CLOUDFLARENETUS false
52.218.152.144
 s3-us-west-2.amazonaws.com United States
16509 AMAZON-02US false
104.18.38.206
 updates.devmate.com United States
13335 CLOUDFLARENETUS false
151.101.3.8
 appledownload.map.fastly.net United States
54113 FASTLYUS false
151.101.3.6
 unknown United States
54113 FASTLYUS false
151.101.195.6
 unknown United States
54113 FASTLYUS false

Contacted Domains

Name IP Active
api-lytics.macpaw.com 172.64.147.102 true
appledownload.map.fastly.net 151.101.3.8 true
updates.devmate.com 104.18.38.206 true
s3-us-west-2.amazonaws.com 52.218.152.144 true
h3.apis.apple.map.fastly.net 151.101.131.6 true