Analysis
-
max time kernel
601s -
max time network
625s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
25-04-2024 09:39
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://notlonso.com
Resource
win11-20240412-en
Malware Config
Signatures
-
Downloads MZ/PE file
-
Identifies hardware specifics through system_profiler 2 IoCs
Processes:
ioc process system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType bash -c "system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType" -
File Permission 1 TTPs
Adversaries may modify file permissions/attributes to evade access control lists (ACLs) and access protected files.
-
AppleScript 1 TTPs 3 IoCs
AppleScript is a macOS scripting language designed to control applications and parts of the OS via inter-application messages called AppleEvents.
Processes:
ioc process sh -c "osascript -e 'tell application \"Terminal\" to close first window' & exit" osascript -e "tell application \"Terminal\" to close first window" osascript -e "display dialog \"Required Application Helper. Please enter password:\" default answer \"\" with icon caution buttons {\"Continue\"} default button \"Continue\" giving up after 150 with title \"Application wants to install helper\" with hidden answer" -
Resource Forking 1 TTPs 13 IoCs
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.
Processes:
ioc process /System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper /System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 73978472-C044-4198-BA23-20B2F9C7D929 /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk3s1 removable readonly /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk3s1 /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk3s1 removable readonly "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" /usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 73978472-C044-4198-BA23-20B2F9C7D929 -post-exec 4 /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk3s1 "/System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent" 73978472-C044-4198-BA23-20B2F9C7D929 /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk3s1 /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk3s1 -
Command and Scripting Interpreter 1 TTPs
Adversaries may abuse Unix shell commands and scripts for execution.
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window http://notlonso.com\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window http://notlonso.com\""1⤵
-
/usr/bin/sudosudo /bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window http://notlonso.com"1⤵
-
/bin/zsh/bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window http://notlonso.com"2⤵
-
/Applications/Google Chrome.app/Contents/MacOS/Google Chrome"/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" "--simulate-outdated-no-au=Tue, 31 Dec 2099" --new-window http://notlonso.com2⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.GameController.gamecontrollerd1⤵
-
/usr/libexec/gamecontrollerd/usr/libexec/gamecontrollerd1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler" "--monitor-self-annotation=ptype=crashpad-handler" "--database=/var/root/Library/Application Support/Google/Chrome/Crashpad" "--metrics-dir=/var/root/Library/Application Support/Google/Chrome" "--url=https://clients2.google.com/cr/report" "--annotation=channel=" "--annotation=plat=OS X" "--annotation=prod=Chrome_Mac" "--annotation=ver=101.0.4951.54" "--handshake-fd=5"1⤵
-
/usr/bin/profiles/usr/bin/profiles status -type enrollment1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize" com.google.Chrome1⤵
-
/usr/bin/tar/usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)" "--type=gpu-process" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" "--gpu-preferences=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" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=21"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=network.mojom.NetworkService" "--lang=en-GB" "--service-sandbox-type=network" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=20"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=storage.mojom.StorageService" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=30"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)" "--type=utility" "--utility-sub-type=mac_notifications.mojom.MacNotificationProvider" "--lang=en-GB" "--service-sandbox-type=none" --message-loop-type-ui "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=7" "--launch-time-ticks=297898314" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=58"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=6" "--launch-time-ticks=297949577" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=58"1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.SafariLaunchAgent1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=8" "--launch-time-ticks=302137651" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=68"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=12" "--launch-time-ticks=302223821" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=66"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=10" "--launch-time-ticks=302261008" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=71"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=11" "--launch-time-ticks=302266329" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=66"1⤵
-
/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=80"1⤵
-
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin --productid com.google.Chrome --print-tickets --store /Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore1⤵
-
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin -P com.google.Chrome --delete --user-store1⤵
-
/usr/sbin/system_profiler/usr/sbin/system_profiler SPConfigurationProfileDataType -detailLevel mini -timeout 15 -xml1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=100"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=104"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=112"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=111"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=19" "--launch-time-ticks=312355055" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=118"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=122"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=21" "--launch-time-ticks=318922323" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=121"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=115"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=115"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=115"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=116"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=26" "--launch-time-ticks=366639942" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=115"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=27" "--launch-time-ticks=367070855" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=115"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=115"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=115"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=115"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=116"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=115"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=115"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=117"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=118"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=120"1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=123"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=123"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=120"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=120"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=123"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=125"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=123"1⤵
-
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" "--metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=44" "--launch-time-ticks=441773631" --shared-files "--field-trial-handle=1718379636,r,13556049715365370034,8184328614299985562,131072" "--seatbelt-client=123"1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.ReportMemoryException1⤵
-
/usr/libexec/ReportMemoryException/usr/libexec/ReportMemoryException1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.20281⤵
-
/Applications/Safari.app/Contents/MacOS/Safari/Applications/Safari.app/Contents/MacOS/Safari1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.History1⤵
-
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.F2D643CA-4039-468B-8BB5-F487E3D73DA5 5801⤵
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.4C276977-1123-429D-B91D-021A86E9DFFE 5801⤵
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.SearchHelper 5801⤵
-
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.SafeBrowsing.Service1⤵
-
/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.SandboxHelper 5881⤵
-
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.accessibility.mediaaccessibilityd1⤵
-
/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵
-
/usr/sbin/spindump/usr/sbin/spindump1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump_agent1⤵
-
/usr/libexec/spindump_agent/usr/libexec/spindump_agent1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.C21EF3F8-35F8-4D41-A4EC-5B603E67685A 5801⤵
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.513BF6BC-8B5B-4A80-AC93-357D02F018D0 5801⤵
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.5C6E4E22-F880-498B-9D50-9E9A6173E99B 5801⤵
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.SandboxBroker 5801⤵
-
/Applications/Safari.app/Contents/XPCServices/com.apple.Safari.SandboxBroker.xpc/Contents/MacOS/com.apple.Safari.SandboxBroker/Applications/Safari.app/Contents/XPCServices/com.apple.Safari.SandboxBroker.xpc/Contents/MacOS/com.apple.Safari.SandboxBroker1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.B39EB5D4-B15B-4F7F-847C-DF52D596C56C 5801⤵
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.FCC8198F-DCF1-4ED0-A814-58F318F82E55 5801⤵
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.metadata.mdwrite1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.xpc.launchd.oneshot.0x10000001.DiskImageMounter1⤵
-
/System/Library/CoreServices/DiskImageMounter.app/Contents/MacOS/DiskImageMounter/System/Library/CoreServices/DiskImageMounter.app/Contents/MacOS/DiskImageMounter -psn_0_2007531⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.XprotectFramework.AnalysisService 4931⤵
-
/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.hdiejectd1⤵
-
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd/System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd1⤵
-
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 73978472-C044-4198-BA23-20B2F9C7D9291⤵
-
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 73978472-C044-4198-BA23-20B2F9C7D929 -post-exec 41⤵
-
/System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent"/System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent" 73978472-C044-4198-BA23-20B2F9C7D9291⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.ReportMemoryException1⤵
-
/usr/libexec/ReportMemoryException/usr/libexec/ReportMemoryException1⤵
-
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk3s1 removable readonly1⤵
-
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk3s11⤵
-
/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk3s11⤵
-
/sbin/fsck_hfs/sbin/fsck_hfs -f -n /dev/disk3s11⤵
-
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk3s1 removable readonly1⤵
-
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk3s11⤵
-
/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk3s11⤵
-
/sbin/mount/sbin/mount -t hfs -o "-u=502,-g=20,-m=755,nodev,noowners,nosuid,rdonly,quarantine" /dev/disk3s1 /Volumes/Notion1⤵
-
/sbin/mount_hfs/sbin/mount_hfs -u 502 -g 20 -m 755 -o nodev -o noowners -o nosuid -o rdonly -o quarantine /dev/disk3s1 /Volumes/Notion2⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.quicklook.ui.helper1⤵
-
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper1⤵
-
/usr/libexec/xpcproxyxpcproxy com.apple.xpc.launchd.oneshot.0x10000002.Terminal1⤵
-
/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal -psn_0_2171411⤵
-
/usr/bin/loginlogin -pf run2⤵
-
/bin/zsh-zsh3⤵
-
/usr/libexec/path_helper/usr/libexec/path_helper -s4⤵
-
/usr/bin/localelocale LC_CTYPE4⤵
-
/usr/bin/loginlogin -pf run2⤵
-
/bin/zsh-zsh3⤵
-
/usr/libexec/path_helper/usr/libexec/path_helper -s4⤵
-
/usr/bin/localelocale LC_CTYPE4⤵
-
/Volumes/Notion/Notion/Volumes/Notion/Notion4⤵
-
/bin/shsh -c "osascript -e 'tell application \"Terminal\" to close first window' & exit"1⤵
-
/bin/bashsh -c "osascript -e 'tell application \"Terminal\" to close first window' & exit"1⤵
-
/usr/bin/osascriptosascript -e "tell application \"Terminal\" to close first window"2⤵
-
/bin/shsh -c "chmod +x /tmp/binary"1⤵
-
/bin/bashsh -c "chmod +x /tmp/binary"1⤵
-
/bin/chmodchmod +x /tmp/binary1⤵
-
/bin/shsh -c /tmp/binary1⤵
-
/bin/bashsh -c /tmp/binary1⤵
-
/tmp/binary/tmp/binary1⤵
-
/usr/bin/dscldscl . authonly run2⤵
-
/usr/bin/osascriptosascript -e "display dialog \"Required Application Helper. Please enter password:\" default answer \"\" with icon caution buttons {\"Continue\"} default button \"Continue\" giving up after 150 with title \"Application wants to install helper\" with hidden answer"2⤵
-
/usr/bin/dscldscl . authonly run root2⤵
-
/bin/bashbash -c "system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType"2⤵
-
/usr/sbin/system_profilersystem_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType2⤵
-
/bin/bashbash -c "ditto -c -k --sequesterRsrc /tmp/xuyna /tmp/out.zip"2⤵
-
/usr/bin/dittoditto -c -k --sequesterRsrc /tmp/xuyna /tmp/out.zip2⤵
-
/usr/bin/csrutil/usr/bin/csrutil status1⤵
-
/bin/shsh -c "rm /tmp/binary"1⤵
-
/bin/bashsh -c "rm /tmp/binary"1⤵
-
/bin/rmrm /tmp/binary1⤵
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
/dev/ttys000MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/private/tmp/xuyna/./Chromium/Chrome_Default/CookiesFilesize
20KB
MD52a3fa78b5f55b529a2698ad187c80204
SHA1cbbda35512038de511ac23b0aed12e9e86bcc796
SHA256d52ad17cc5096119732f06311ef2e25005c2a00f551c9684e2d655cbc846455b
SHA512e9b113ec0c6a888e059cf625b0bfb128d11a55970fed12df30848c9f836c5f36b2660abb4e2a820e7dedd6f0ead312edec1c6cd645f14091d98b42f696bda9ab
-
/private/tmp/xuyna/./Chromium/Chrome_Default/Login DataFilesize
40KB
MD5b6914d8e5cb470236eceed8d6f8b4fb7
SHA1cdff8880e9fa7630fc8d57af4669365b5ab29b60
SHA25645bda2415419c24d2526ae60cae5ee1d66bc8d2cc986bb9e94c0f3c414af06c1
SHA5121c491cfeb2b883ed20a43e16d7bf620520f4b770c8727ffb83e02554aa6aa54def4732460bcff82014050f7a1fba38e01f5570cacfbfcef6da6f2f795dc56ee7
-
/private/tmp/xuyna/./Chromium/Chrome_Default/Web DataFilesize
90KB
MD54e9060f76c1cb5b54005dc6640a58f0d
SHA104a1e6791ae55612d9b63f23ccb37eec398b3d27
SHA2565b6dd3116e1d3ecbf6d07ecfc03f1537ab00ce91336cc7c6cddda6df0c9984d3
SHA512be921e02bb810fb867c1de3e3c2a9c3b04c84188d6a9eae60b73558bd4748c1451161da8fba2c8e74f225be4b8a6f0e98276fe1e397b0083fcbbd4ebdf32e148
-
/private/tmp/xuyna/./keychainFilesize
104KB
MD5e6c91738150de938db0b6a47b18ccae2
SHA18e82a37eff4f1db238dc6098bf948a064851bcfb
SHA256a504c29dfb5518401c14eaca4ecf2d4f764370b38f8c7d71d0efd8fea1dc380c
SHA51229026a38d1ba4d1493fd3d68ee3af4ac393ee5680bed63defc33f924678ac3048ea6c2933dab15ca5eff19cc6e875d49c8247791fb227dd31b6f4c5e737dfc4e
-
/private/tmp/xuyna/./pwdFilesize
4B
MD563a9f0ea7bb98050796b649e85481845
SHA1dc76e9f0c0006e8f919e0c515c66dbba3982f785
SHA2564813494d137e1631bba301d5acab6e7bb7aa74ce1185d456565ef51d737677b2
SHA51299adc231b045331e514a516b4b7680f588e3823213abe901738bc3ad67b2f6fcb3c64efb93d18002588d3ccc1a49efbae1ce20cb43df36b38651f11fa75678e8
-
/private/tmp/xuyna/./userFilesize
1KB
MD50f8ffa6767bdee0d4453a019167c2eee
SHA1839a4271147a1a6106b7faaded4efa6afcb8a9ef
SHA2567203d68fa0a10a3f1cc738138d3a435fe732ec85648a4b6407daae00d254d4fe
SHA5121938f8f04cbc7d5b4d57d371887751edd2a7a4ab29b3fbbaa1d0c61a76ae713bab5130f98d38263ebbcc5debb322dd0a4f210eca1602027bc20a5c8cf9ee2a72
-
/private/tmp/xuyna/./usernameFilesize
3B
MD5a53108f7543b75adbb34afc035d4cdf6
SHA1df6ad19037c97987c4ff9792810c0e145356717c
SHA256acba25512100f80b56fc3ccd14c65be55d94800cda77585c5f41a887e398f9be
SHA512755986f37193a6d8c1ef1f254ba68213f3477a48dc1acd78b551f82a54cf0e617b4aee2e85c575d6dc0159396b9ee95bfb9bfc81ff52258db13734959d92bb79
-
/private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/scoped_dirhjMjnD/CRX_INSTALL/images/icon_128.pngFilesize
3KB
MD530899b6c4e4a757b8ec6dd2208acdfb4
SHA1f2c5880a724c6d75cce1b5191e0d82c3bc7de768
SHA2564f17efbd974a41d88cb36567aab6bf4586579e78780f00b1826676819e14bff4
SHA51258539e3f0ad7fef30792efcdbbd955599e11e4261c9946e7c3dff6267e01747354ea3b901c46fc8329f81c68afbeb2d05fe3fcb266bc5948de8befa5b8d040ee
-
/private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/scoped_dirhjMjnD/CRX_INSTALL/images/icon_16.pngFilesize
531B
MD5344554d96e418120bd80ef5de5194697
SHA123e141c3a6ce368acc1c299f062ab85914bcb17e
SHA2560a4bd08db6422f8e7a8a218ef39c1b99a5a675f12697f26be88f9afc2e1f9378
SHA5127ae38853e5acca479d7fd81d48bb88c671cf4dce63342209bcff045ac581a04b7b0ed48f6c58253db950935c0522caaa4fbc6cf5a25151a8960ba56fc804569e
-
/private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/scoped_dirhjMjnD/CRX_INSTALL/manifest.jsonFilesize
1KB
MD587213fdc9783cd5d58e380eb255daa53
SHA1ea326bf03d6a72dcd8e764f322a2a213a8b53f0c
SHA2561e64c0c4d7ba808fdba4a0860d174a16ee62ef06ee02833594d3c3404733da8e
SHA512464169aa5f254763b4e81a457460c632313d9412fd05ea002553c19174ecf1d0e7548ef934936b6128f25d779dc3163a9206aed67f8602ac7edd12ec224e7eec
-
/private/var/root/Library/Application Support/Google/Chrome/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.6_1/craw_background.jsFilesize
531KB
MD56eebed29e6a6301e92a9b8b347807f5f
SHA165dfb69b650560551110b33dcba50b25e5b876de
SHA25604cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
SHA512fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
-
/tmp/out.zipFilesize
34KB
MD55a7c5aea587ca70466943849c3e68c8d
SHA1d359bbbb1665deadd88cf3cecce4de933cd02faf
SHA256eab53cd8553117de4c08cb7dced7c964ff423ef6b94b38e32e53c33256a9be42
SHA512975481e6010af596cfce8bdcd61345bea51e6134916bdf40f00ff1a314fc65b80b7f07bd69b8f12d45bb88d964e081c23f9dbf31fff2190dbb83cf12924cce99
-
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expressionFilesize
220KB
MD59bdcc01d820446461e0f55c2896b7848
SHA1a6fd6b5271a790d8403ed3558ee53d8cba4d4c16
SHA2567fc8854dc5aeac72c15de72f78f7b3a46cf8e55c5dddff441050f1ce8490f8c4
SHA512d3e3ce45fd5672e1154b9effc8ed41366d15a93bf2af02254dfe3c2aa94473518fd37343dc6e05b5a1f215cbb7fab5bf650717429de41326791bdf77ac91aa4a
-
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expressionFilesize
22.5MB
MD5bff1ef84c66ac9dfd6592bfd61041b93
SHA1c999c07f20709a291a53cb4dfa6430b2a3ea8a9b
SHA2563109f7a60042fe7641ff5ae4e33781618383af4c627ceb6572795eabd0995ea9
SHA512b77ae34990e2b995b3f72af60635677ad97c63c1fefd52d59c705d1b0c8985e84cebd84736c1f1719e3f58c2c197a68bf32064c6640a848a0c6b29087fa8b3a7
-
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expressionFilesize
120KB
MD561a558ac4f6b94da70277f63291e4467
SHA16649eed62a97bfa4d6d19eb12b3033f049c41a35
SHA2565c87d07c0301a415f14491db951e05b4579b27618898c6eb0390bfd739e87463
SHA5127cf3d0b5c2882860da8fa60725fdcb40d9abf723d05826d34572bffc452dd603b5922d4f732793f4af04f81374b059dfe95386866ad9e118449d5295e6f359c9
-
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari//mds/mdsDirectory.dbFilesize
47KB
MD50e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA5121dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20
-
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari//mds/mdsObject.dbFilesize
4KB
MD5d3a1859e6ec593505cc882e6def48fc8
SHA1f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA2563ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.8vEYXu/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3Filesize
1.2MB
MD5c6551198ed542f3a69c5e5254e42ec5f
SHA1b1f29b9c6424ce57291d3fae2b4cf3b23381056b
SHA2560f07173aa692b5c92843e24d65c1a0940eb8bac6828a21b7d2fa7974ce9899be
SHA512e4db0b391a56e55da0b0543c0b49c2c3e53221949d4d5bc7a5c85fcbd4551b53360f8128ab37422697e6f46465ba6cb92e4e130561dce5e96a024725687abd39
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.8vEYXu/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3Filesize
676KB
MD5bf39afa3544e908b9fac77cd951a99c1
SHA1b78d73e13a794e09b4e025a89a416c721b4a62b6
SHA256d5f2ca2a8a2355cde1fae56f49c64857cc354ff28b986686a939053d547c1d1c
SHA512481834541ca32463062c979628e8fc1e0fc0043db9139ea829c99e10db422e4ea0efdfec35de9372b3631cb79ad38da1ee484aea6105211642758f321714296c
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.8vEYXu/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3Filesize
220KB
MD500f7ab30edabb0ef3a94ef1c3c878cd6
SHA1313baec4207c85d0bc4e625978d3b9424bdc8bd7
SHA256b9ba5cad8f3a80617f0caa6921ff2fb2385c9a17762b24f957581ee547693967
SHA5124d131f15fccbe67ae38d2e7003b9816d6daa6b4e3a06fd8337f3daef929077f4bb0ac8f1fcbab559ebb49c031f9b13ed758a03278997b33f5230800063d431b3
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.9SDT4l/npdjjkjlcidkjlamlmmdelcjbcpdjocm_1.3.19.240_mac_adygwryqqyfdwvvjh32xxi6rilea.crx3Filesize
2.8MB
MD5246a74370d1a41de1b68c276be93b895
SHA12a965f5b6262e93ed5073d463134cfd2802f1bd7
SHA256941494b903a35cfc9f822c70a5baf09cb47503b04651515706df03a9886d3555
SHA5120fa57904cc6e6dc8407dd78f963241a3574ff4565a29b636ca56cf28197a42a6f703fa1aa8c4973710854fd37393e4641959568e61b9a0ce9740e51fed0d4670
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.9SDT4l/npdjjkjlcidkjlamlmmdelcjbcpdjocm_1.3.19.240_mac_adygwryqqyfdwvvjh32xxi6rilea.crx3Filesize
2.3MB
MD5d0f25d3bb5f163192afde2184498a25e
SHA11fddf0ea49ac288a6cd6e3b4aad2ace1ebddefa4
SHA2560799a0258072d4dee917b3b6943b883066cd32d21b8a4e0163ccc20a5d63367a
SHA512890c574738f35ee50a6aebc502186bdef616e4201e184bdf7eefac8427cc9080700ce7238b78a21d3ad19955333ffb5a2df9e3c361722561b46f4f91a953a058
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.9SDT4l/npdjjkjlcidkjlamlmmdelcjbcpdjocm_1.3.19.240_mac_adygwryqqyfdwvvjh32xxi6rilea.crx3Filesize
356KB
MD57205345e27ffdd93009611bb3403f8bd
SHA1e6ba3e0efb340ce4fb007c4bba2030d07218921e
SHA256e4953fb44739556c902dfe2964eec1090ca78bb59c39093b034b682b7665f68e
SHA512d6a83cb54d73d8665e70b3f16993995be4ae80dd97a427721dbf4f84757e4983d676f4420cc13d4cbb11dc05fb8cb95c51a745727fb941c0e7688c71096111fb
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.HsgpdE/obedbbhbpmojnkanicioggnmelmoomoc_20230923.567854667.14_all_ENGB500000_j4ulfqgydb3iosc4yghs2ynkzq.crx3Filesize
5.2MB
MD54fa818629f7aa7a42f048e08dfb7f3bb
SHA14e1bff38aa1adcedd8b719110a19d9795a054b04
SHA2568069f8805123f74944304604381770bb694317c9e1044e096f540222dc56c0f6
SHA512ebbd49bf7030d9c6fd81b9bef122bbc910815fb68108f0e69bbf8beb6cd692b496f87dc1c91a4952d92579bdf734e6cf56d0e91e5c3c72e2d0c196b28e090003
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.HuYWmZFilesize
242KB
MD5541f52e24fe1ef9f8e12377a6ccae0c0
SHA1189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA25681e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
SHA512d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.K8YqSs/EWvH2e-LS80S29cxzuTfRAFilesize
111KB
MD5d7d63288830d5930f435d6841de6de5a
SHA1a2afc39ac8fd17fa88030ba8b48d9d8ee93c24d5
SHA256c64c9c1008f3ba5f6e18b3ca524bc98dcd8acfae0a2720a8f1f3ef0f8d643d05
SHA512d4d85fd16a291474f99a6fa9cc76d5432f5865fa0d76e4185ff5ab775045122cdab771e88da8fc317a059ab901373644b2e7251d31c4fa2c389d9b7584351e20
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.NudVTF/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.10.19.1145_all_ac7cecrzrmfngskhgmtk6zmhfjoa.crx3Filesize
10KB
MD5cb79d407a4d6d8526b42060b9210b5c2
SHA1331e3d66e82e130042897faf86dcbd05d7b227f1
SHA256e3a7322843834a5270a01c56533a34a24b1a253e3bda6f14046e10d818446165
SHA5120ea283f2077ff874e1f2518565497864b11fd8a65f03d65e2b2996048bdba19849fcab81d9a8220cd51d4a09741b9cf222b1393f6ea4fde6db76dfe0590efdf9
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.Tglm3b/hfnkpimlhhgieaddgfemjhofmfblmnib_8702_all_jpayborcnyqiezx7526uyot62e.crx3Filesize
25KB
MD5e8010ec264cf8c64a6feac52bc333d92
SHA1c3bd820336fc5528bbefdce221e7ee5f72492c6d
SHA256e867f7f3c05eb25f04fcf8b9f5930dd8bff2942b90aaaebb9a40e481328822d5
SHA5121f43973300f00e74f74e789a11a0e71f02faa897b244cac649f0f788585cf5a32bafc4d6edc1f5a63575b1b4bbab4966610ced6070a3129838a4874f7c3cfd7e
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.XlTr4z/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.49.1_all_ixzyrcu7pvmgu5pjv6enfqq6wa.crx3Filesize
34KB
MD52db7e78c310ca8e73c069a604eac4d99
SHA1a6d1e03514f8eba03ab81f1380fc54aaded823b6
SHA256cd1978742a4afdbaaa15bf712d5c90bef4144caa99024df98f6a9ad58043ae85
SHA512681eaddbf304f4513b008b98493272b44815460568876b93528851ff7806775de38e6ec588fe27a2cf3dc804415e83a420e45d754b25ad4bdf68ef2c78403aa3
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.fOUhSG/pdafiollngonhoadbmdoemagnfpdphbe_2021.08.17.1300_all_acatmzocbizfck6xlj6bync6egba.crx3Filesize
12KB
MD549ead9b7d2b2ec477daba795de846db0
SHA195c030a130b9171e8ba4dd35ba3ee93ea5fb2ddc
SHA25654b93e249d02a0f9061e8f70866d4668a0260db9ae43483810ab78f97f3eaa2a
SHA512661000c35e25564c6d76219a5fd327edff7287a29dae54b677a7399eb136d0c93f099eb00ea9d0b3c965d068ea505335bcd580931662aeea2c796588ba8ce049
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.k0aCU3/7_all_sslErrorAssistant.crx3Filesize
5KB
MD5636c653ec2c30bb767533901a18669b2
SHA14b5a01cfea4c5deb62f3aafa01ef24265613b844
SHA2563eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
SHA512a4128fb20a5df9e573e92b45f5bc18dcdf4be6e7e39172d08847882f17361320141e89b35deef337e40c365d6f1ccdd1b991eb4593d805dfa2e39a5257c335ee
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.kvuyZo/laoigpblnllgcgjnjnllmfolckpjlhki_1.0.7.1652906823_all_jtggsagwbg7dhs53nvq4e53lva.crx3Filesize
10KB
MD591e1255f92fc76b16509bbd174a992b5
SHA144cbc6b7b60470149850d375f2e2ae95cf1c012b
SHA25629661be65c8fb50d3d4df2fe040a1cc6dd525f50a95850aae6a191301c3de744
SHA512ac1588c003c345aaf9a7c4b5f2d338fdaba041dacd65db567ff8cc588b47e372863e44a4a87f611c1530fb42fdb1388814d3caccf8bb3498c7efe78fc321d9cf
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.ljIx1q/dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3Filesize
136KB
MD5667e9eec04509aa9e2b318f580addd8c
SHA1346267ecad10c54de52a3aeb766ea72449500326
SHA2560c24e9bd976adffa987e08fc54dc0950c84cf18f9cdb4c5caabc6acf24887c4f
SHA512a9d22d49290c164abf36dd7e887063ccdd2bf508eb2d16bbac6de749e5152805ecb38ca39352706150de29a76839fa6a56c084ea4f2757b61887b3a7912be917
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.pz6PBX/gonpemdgkjcecdgbnaabipppbmgfggbe_2024.04.19.00_all_lf6qpfuqeijgt22ubblj6anbae.crx3Filesize
6KB
MD5410e65ad5825b08a325eaf05845d65ce
SHA1d1563d18dc0e392e5803e52b2011ad729dfeea28
SHA2563384c2cc7c211094196c0cd407f37564179b144eedcbcecf829d3d997f88c4dd
SHA512b908ce4e9588f7499645cd8864729097ae0644088bb36cb83c9ee865b4d3ce252e4da042d91cf3e5001c819c3883fbe7ef4347e51120a1750133e9572b47e275
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.r2rd5q/1.0.0.15_llkgjffcdpffmhiakmfcdcblohccpfmo.crxFilesize
3KB
MD539fbc1bf4c6c8f919181e3e72630f974
SHA1b73f2394a2c1ac341df75ba63eef4e5e9830fade
SHA2563a118962ef814c91f6476bb9f0de58afa63103af6ac1b8729be9b39a86789e96
SHA5122dbd8f772bc113f6500dace5d187b12c79e6e3a5c7f6f68d270beebc482334a1970499b28de5187a3619ff3ecd20aab10c31df8433d509dc011e1e88978ab70e
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.sjEwse/jflookgnkcckhobaglndicnbbgbonegd_3026_all_an75hpewbujg3uqbc7zvphe73a.crx3Filesize
69KB
MD525d9086469baca3047d5d3aaef6c98e3
SHA104f34b6fa058d25dea98ba0cd1456b4681fdcf82
SHA2560bd20c0ed22291b160114420a22e8ae9fd79a002cff2efdff99285f35a15f629
SHA5123d3fbb7292307c9fa51c2e8ca05eaafb9e8c7eda27d714a6f509388010e0e1bf8312315cd91cc58f04f04b2b0f1fa309c92454fc4390b26959a51af5f4ba7e8c
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.t0mvBW/khaoiebndkojlmppeemjhbpbandiljpe_63_mac_acj4pge7wnngtgdmbzd4p5k36luq.crx3Filesize
5KB
MD5dd093ee4be8228581afa24a12c4ff5ae
SHA1744b07f0920111293fd8614a8c08b91a7a9fbd51
SHA256458d41f9ddcf8cb983af99e4765c6653d1e70a30d15491f5b1cbee0ce4b07907
SHA5124fc4a8453804b44d9e2bc54c01fa68e7b69a21a2ff0da8bc73386bd94ac9b173fa84f26fa801e13e384ac2842e44c69ea9443e509418ebe385ebea1df3ec205d
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.tLiS9t/lmelglejhemejginpboagddgdfbepgmp_443_all_ZZ_kuzwi6ixbhrwy4xw74jjy5jmrm.crx3Filesize
46KB
MD57fc8e0ec14ee9fdb49b4eaaeff814087
SHA14c1ac0556c9946698a403dc426ea072e58755e3b
SHA2568076c3d0dd2cb1f8169cc6e5fd6c194e96cf989ca470815ce8491f77802dc303
SHA5129ff57d846ea5b4d0d43a18fa6dde9dd54a31f5e96f57b64fe2db4d409c9919d4a72c3566e4fb7943437ccbb2b3232918e468721107ae5754775cc8042a734458
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.xbCXWA/ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3Filesize
220KB
MD5b26f392ae0597f7e3a4d376f3405c6e5
SHA183d9d208f8827cf8f258c1ca0899470e9c7e5bd7
SHA256940b25fdaa0e49313ae830139de42116db4e181338fa7770821f137f34ac19ca
SHA5121e370d3b2abed9436f921c40e57f574a811d7017aecb0653e6ff345e1cb7677506400f3d043898943680962deff67dfd3982c23280c529685c71953557a2144d
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.xbCXWA/ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3Filesize
212KB
MD5608558d1d0077715b6bb67df11963311
SHA1b09bf4398c8c474ab61d4aa0e8a42c3c3684a8d8
SHA256e4fb5dfe80eb4f95c31ebe812b9d4ec3cf5edfbb236a72d60d6139552d1af50d
SHA5121cbb52139a1fa8a6328149c27932abe189e58b6b52c517d4295646926b1b03219afe61b8a8e1ff381bb3db79d983a9974d1b61183b070a88df630d4e7cead906
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.xbCXWA/ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3Filesize
208KB
MD5c457fda2ffc86e09d5fb953527542891
SHA18d46f106d959489b049e8a864f0d0db0d23e6b4b
SHA2561d38d892d7a1f483f4e1237bedd6a8e124547e930ebf08d1cff504a43d0eedc7
SHA51297edd8e0f65a781c6e8f94a6b10f637b6aa166ca066604c3a26b023cfdd0a11ce68a497105bab979d4bc0918922c2c37414fa04c33b68298a48ab39b90d2f7b9
-
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.zjOLkg/efniojlnjndmcbiieegkicadnoecjjef_937_all_mbroa2miwekhkwcvwuyn6quwyq.crx3Filesize
150KB
MD5878d6f9645b8616f1cf73aef3b383768
SHA19ab7d0c3eec81c69c8cca31fdf33220f42c2cf53
SHA2568fd30669cf5f2372cb601678843f45ad189828b3706f2cc3f273bad52fc18c34
SHA51266e670835f83fef785a4b95c8ab58a8aa72cbfa2d1af1e0b052a5d7c00fdcd0c1b1f37a20ac67e8cbcc94d99316c81cf5546ce1cc099e36b43793f42605f5e60
-
/var/log/fsck_hfs.logFilesize
15KB
MD5a5be123ba5dbea69b32cff79c6b8b90c
SHA1e9f448dd35da42c09f91a7fb1fbdbb04a633a68f
SHA256194eb4e1be058d2eb9988ce94199b3da81bdabd6145612723e262432064a5291
SHA51265d99457841c7a2921d1ad419d59bacdcce195c78d854ae1c03240270bd5deade33e6c914104639f23b2f04ea07fb197d4648ee576669259dcb1a5b67c335bdd
-
/var/root/Library/Application Support/Google/Chrome/ClientSidePhishing/29.0/visual_model.tfliteFilesize
3.0MB
MD5a9803d560544e4d1fe551b2c113c5370
SHA1a998fdb1e80dbca61267db112812a7ee34b82dce
SHA256d38a4cda8912f9598b8701dac7d5ee90eff324ed1fb9d277b9784fe45a4e6c72
SHA51265b8b6ecfea2aeae95a39581c39476a54721e07ee7c296650ccddea29a09b29a11cab15fdc89f97295bd61423dc13a66666faca371200bcb459dc1f25b6c89fd
-
/var/root/Library/Application Support/Google/Chrome/Crashpad/settings.datFilesize
40B
MD5c6db1caaee0095f017c09113d53ed054
SHA1cc37e2b3948325a0eeb51080f45b17ebf52a7035
SHA256ca3252b297284a87de2ee1688585f7c37d26b98c05d7ed04bd7d6df10c0d1476
SHA5123013340ee4157dfef7dcacd690b840f12b876e8241d4e8bc419016d5336810ab77023cdbbeaa896544e4c29f386d21296649542ef2b0fc6b58c49e2ad0337d85
-
/var/root/Library/Application Support/Google/Chrome/Default/Extension Scripts/CURRENTFilesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
/var/root/Library/Application Support/Google/Chrome/Default/Extension Scripts/MANIFEST-000001Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
/var/root/Library/Application Support/Google/Chrome/Default/Session Storage/000003.ldbFilesize
141B
MD538fc535a8f11d7e955ef58cc63158eff
SHA1c45ad3ee106dbfb65dce7c09b53140f34454cd0e
SHA256085c44dfa11e65ac3548c4d0fe1ae641570f90c7caaa2881c3990efcf555e6a8
SHA51226e70000f77c1b6388dd470f9d7ec6bedc4fc3c43e48efcc853812eb076108bcdd9f50f7a89265e431d33df96e71755ca242dfd0aac16a51d99dea50a5a1e505
-
/var/root/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/000003.ldbFilesize
312B
MD55c4e7ade5753ab7de2c42c04111fa42e
SHA1fb577b8c07d9617f507a3f2950df0a6dcfebe4e2
SHA256d3979fd2d9ecfdb05498d79d1f24998c38cfd107e321f6810d8b7f9f12affd82
SHA5127a7452bcd22e66190e36ff0036f21d854fa57bdcbaebf637aa3a6d932a385a7c90525ede0c124853c218445d583c0edcf45d12159ca452732f31d16c3901929b
-
/var/root/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/000003.ldbFilesize
136B
MD5fe382e791274914bee5950777e4f1fd3
SHA153b523b5fc87e66f2520a0b5f9ea080072668f4d
SHA256935d36c021d0e08a5648c622f3f6fde376e3310013680ae598c0e22dc943d132
SHA512a5f608fb4f0a1dbc4c5d1b739b1a5b6f50cac1d6a61312b19abf9f601882a291d73524ac55bbe183e4e64db8dcc203d4bf3cedc734fd04bd448cb825d98d1e67
-
/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/000003.ldbFilesize
337B
MD5ea517aa120c972c602673d331dfa35bc
SHA17ff539eec544cf306b80137bc182fb544e58aad5
SHA2560c53b2ef8ec9bd6c3b81955b45cd9fc69705e7b435ad747b50c150c7e341f8da
SHA512e2bc6f26b0db61af3b7f1648e890be2b748aa886ff3ab51e207a915432c6d9a426b188fe9c979b443e8fe8aad248442b20b2e6cd38f494264cb7cdbcaa88eecd
-
/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000003.ldbFilesize
353B
MD517a2dc5826aeb539547f00f52eccccd5
SHA1fd36ad6db84312792cffac0267f6329b21727d66
SHA256746da9cf33c3e4d29907dfdf1065f06ae16dcb5c2e9a34cfb5dd0dae9130f151
SHA5126bca3e308d0446211570021c1f1dc6d8e9704a2a68a90c5c8daf26b20cb2702bccfae8ddfeb6f16c8bfea83e1b648810054a25a7967bb9539feb241f2950ea73
-
/var/root/Library/Application Support/Google/Chrome/OptimizationGuidePredictionModels/f23db362-eeb4-427a-bbed-daf33a7514c9/model.tfliteFilesize
382KB
MD56d7c2f9e94664539dec99b3233301b01
SHA185812b004742cc1c211c92911131ce270f8ba769
SHA256a0956386dc64fd9f4883c8741f950cd60a56859616b159c9e4251c9eb0ac5534
SHA5124d06917f30651c3bf13c509aae79793b3f1ec93de12179464b18fd9fd16c7bf466884b1c70e425d7e937adde341cf24bd08f19a132bbb9683e804f29b4ed0c33
-
/var/root/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.49.1/Ruleset DataFilesize
120KB
MD5c5e30274fe7b93847f6d7c02410d1209
SHA1488a49f38459f29e110c706c51b61ca1ae3b0e26
SHA256e634e3cfdd0d27d0be1f5f9a19748d19d564928765db343503f42a6e1f5dd4ea
SHA512bc235bb3af269e9a828e6788dbae2b42cabc879b858102f4cc76c0fa02af0e296d20ffc8f134c0a3f9b408643e4810e8c46afeb0c285b892908b06ea1aa1b811
-
/var/root/Library/Application Support/Google/Chrome/Subresource Filter/Unindexed Rules/9.49.1/Filtering RulesFilesize
68KB
MD56274a7426421914c19502cbe0fe28ca0
SHA1e4d1c702ca1b5497a3abcdd9495a5d0758f19ffc
SHA256ae2fd01d2908591e0f39343a5b4a78baa8e7d6cac9d78ba79c502fe0a15ce3ee
SHA512bf1287f502013308cdd906f6e42998c422ef1e272b348e66122dc4a4e471d01333b418f48d1bb2198c72845bdc950612597e179e612aaa1ba6cf8d48fb8f0cf5