08ed3b69d0889e5b2cb54a2a1fb81a880c22931b05df8cfb71367905fc73607d

max time kernel
690s
max time network
700s
platform
macos-10.15_amd64
resource
macos-20240410-en
resource tags

arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
12/05/2024, 02:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
screen-20240511-181029.mp4
Size 12.8MB
Sample240512-cjsjbsbe2w
SHA256 08ed3b69d0889e5b2cb54a2a1fb81a880c22931b05df8cfb71367905fc73607d
MD5 8e479d8106be86a73f25c99ca4b8146f
SHA1 ecb2595bd8a69438c094d3d7abfe91e9a68965a8
SHA512 3cbe45aebe435c9201b8f7918c2f95fde6c40fce642f2eb165f582ef9068a109aea7f2c1cf7d0b432b700a3858458f25897e84ae344e09e046e28c165d503124
SSDEEP 196608:d9lefzSHXZLvaUGZbDpKLQNEd4AahmdcnTKJqORRWitUtZhWM:darStvahblKLQo/ldcTdORRWuUX
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

evasion execution

Malware Config

Signatures

Resource Forking 1 TTPs 47 IoCs

Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

evasion

Resource Forking

T1564.009

ioc	Process
/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk5s1	Process not Found
/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck	Process not Found
/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref	Process not Found
/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk3s2 removable readonly	Process not Found
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid D3327D13-CCD3-4478-8264-E44EB0DB8F9F	Process not Found
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd	Process not Found
"/System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent" D3327D13-CCD3-4478-8264-E44EB0DB8F9F	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk5s1	Process not Found
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid	Process not Found
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid C8B65174-31E3-4263-83B9-38C90AE398BC	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk3s2	Process not Found
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 75FEB1FE-3719-439F-8C9E-57E7CA0B7A1A -post-exec 4	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk5s1	Process not Found
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd	Process not Found
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd	Process not Found
"/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated"	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk3s2 removable readonly	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk4s1 removable readonly	Process not Found
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd	Process not Found
"/System/Library/CoreServices/Software Update.app/Contents/Resources/suhelperd"	Process not Found
/usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk4s1 removable readonly	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk3s2	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk5s1 removable readonly	Process not Found
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd	Process not Found
/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool	Process not Found
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz"	Process not Found
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid C8B65174-31E3-4263-83B9-38C90AE398BC -post-exec 4	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk5s1 removable readonly	Process not Found
/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk4s1	Process not Found
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 75FEB1FE-3719-439F-8C9E-57E7CA0B7A1A	Process not Found
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid D3327D13-CCD3-4478-8264-E44EB0DB8F9F -post-exec 4	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk4s1	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk4s1	Process not Found
"/System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent" 75FEB1FE-3719-439F-8C9E-57E7CA0B7A1A	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk5s1	Process not Found
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk3s2	Process not Found
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid FD44FEF2-FE1D-4FF2-8CAC-A568BBE471AB	Process not Found
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid FD44FEF2-FE1D-4FF2-8CAC-A568BBE471AB -post-exec 4	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk3s2	Process not Found
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk4s1	Process not Found
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/SoftwareUpdateNotificationManager.app/Contents/MacOS/SoftwareUpdateNotificationManager	Process not Found
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded	Process not Found
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd	Process not Found

Launchctl 1 TTPs 9 IoCs

Adversaries may abuse launchctl to execute commands or programs. Launchctl supports taking subcommands on the command-line, interactively, or even redirected from standard input.

execution

Launchctl

T1569.001

ioc	Process
/bin/launchctl unload /Library/LaunchDaemons/com.google.keystone.daemon.plist	Process not Found
/bin/launchctl stop com.google.keystone.user.agent	Process not Found
/bin/launchctl stop com.google.keystone.user.xpcservice	Process not Found
/bin/launchctl asuser 502 /bin/launchctl unload -S Aqua /Library/LaunchAgents/com.google.keystone.xpcservice.plist	Process not Found
/bin/launchctl unload -S Aqua /Library/LaunchAgents/com.google.keystone.xpcservice.plist	Process not Found
/bin/launchctl asuser 502 /bin/launchctl stop com.google.keystone.user.agent	Process not Found
/bin/launchctl asuser 502 /bin/launchctl stop com.google.keystone.user.xpcservice	Process not Found
/bin/launchctl asuser 502 /bin/launchctl unload -S Aqua /Library/LaunchAgents/com.google.keystone.agent.plist	Process not Found
/bin/launchctl unload -S Aqua /Library/LaunchAgents/com.google.keystone.agent.plist	Process not Found

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/screen-20240511-181029.mp4\""
1⤵
PID:491

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/screen-20240511-181029.mp4\""
1⤵
PID:491

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/screen-20240511-181029.mp4
1⤵
PID:491
- /bin/zsh
  /bin/zsh -c /Users/run/screen-20240511-181029.mp4
  2⤵
  PID:492
- /Users/run/screen-20240511-181029.mp4
  /Users/run/screen-20240511-181029.mp4
  2⤵
  PID:492

/usr/bin/pluginkit
/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync
1⤵
PID:494

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdaterB516C108/OneDrive.app
1⤵
PID:496

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:518

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:518

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:519

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:519

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:520

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:520

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:521

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:521

/usr/libexec/xpcproxy
xpcproxy com.google.Chrome.3056
1⤵
PID:522

/Applications/Google Chrome.app/Contents/MacOS/Google Chrome
"/Applications/Google Chrome.app/Contents/MacOS/Google Chrome"
1⤵
PID:522

/usr/libexec/xpcproxy
xpcproxy com.apple.GameController.gamecontrollerd
1⤵
PID:525

/usr/libexec/gamecontrollerd
/usr/libexec/gamecontrollerd
1⤵
PID:525

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler" "--monitor-self-annotation=ptype=crashpad-handler" "--database=/Users/run/Library/Application Support/Google/Chrome/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=channel=" "--annotation=plat=OS X" "--annotation=prod=Chrome_Mac" "--annotation=ver=101.0.4951.54" "--handshake-fd=5"
1⤵
PID:527

/usr/bin/profiles
/usr/bin/profiles status -type enrollment
1⤵
PID:528

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz"
1⤵
PID:530

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize" com.google.Chrome
1⤵
PID:531

/usr/bin/tar
/usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist
1⤵
PID:532

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded
1⤵
PID:533

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)" "--type=gpu-process" "--gpu-preferences=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" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=19"
1⤵
PID:534

/usr/libexec/xpcproxy
xpcproxy com.apple.CoreLocationAgent
1⤵
PID:536

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=network.mojom.NetworkService" "--lang=en-GB" "--service-sandbox-type=network" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=19"
1⤵
PID:535

/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent
/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent
1⤵
PID:536

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/GoogleSoftwareUpdateAgent.app/../../MacOS/crashpad_handler
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/GoogleSoftwareUpdateAgent.app/../../MacOS/crashpad_handler "--database=/Users/run/Library/Google/GoogleSoftwareUpdate/Crashes" "--url=https://clients2.google.com/cr/report" "--annotation=plat=OS X" "--annotation=prod=Keystone" "--annotation=ver=1.3.17.192" "--handshake-fd=4"
1⤵
PID:538

/usr/libexec/xpcproxy
xpcproxy com.google.keystone.system.xpcservice
1⤵
PID:539

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=storage.mojom.StorageService" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=26"
1⤵
PID:540

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost
1⤵
PID:539

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)" "--type=utility" "--utility-sub-type=mac_notifications.mojom.MacNotificationProvider" "--lang=en-GB" "--service-sandbox-type=none" --message-loop-type-ui --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072"
1⤵
PID:541

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=7" "--launch-time-ticks=310912904" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=58"
1⤵
PID:542

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=6" "--launch-time-ticks=310962495" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=58"
1⤵
PID:543

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/GoogleSoftwareUpdateAgent.app/../../MacOS/crashpad_handler
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/GoogleSoftwareUpdateAgent.app/../../MacOS/crashpad_handler "--database=/Users/run/Library/Google/GoogleSoftwareUpdate/Crashes" "--url=https://clients2.google.com/cr/report" "--annotation=plat=OS X" "--annotation=prod=Keystone" "--annotation=ver=1.3.17.192" "--handshake-fd=4"
1⤵
PID:548

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin --productid com.google.Chrome --print-tickets --store /Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
1⤵
PID:549

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:550

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:550

/usr/libexec/xpcproxy
xpcproxy com.apple.SafariLaunchAgent
1⤵
PID:551

/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
1⤵
PID:551

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:553

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:553

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump_agent
1⤵
PID:554

/usr/libexec/spindump_agent
/usr/libexec/spindump_agent
1⤵
PID:554

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin -P com.google.Chrome --delete --store /Users/run/Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
1⤵
PID:555

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=8" "--launch-time-ticks=313999178" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=76"
1⤵
PID:556

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=12" "--launch-time-ticks=314148173" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=76"
1⤵
PID:557

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=10" "--launch-time-ticks=314636606" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=71"
1⤵
PID:558

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=11" "--launch-time-ticks=315051388" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=71"
1⤵
PID:559

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=102"
1⤵
PID:560

/usr/libexec/xpcproxy
xpcproxy com.google.keystone.daemon
1⤵
PID:561

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/GoogleSoftwareUpdateDaemon
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/GoogleSoftwareUpdateDaemon
1⤵
PID:561

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=14" "--launch-time-ticks=319026389" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=99"
1⤵
PID:562

/usr/sbin/system_profiler
/usr/sbin/system_profiler SPConfigurationProfileDataType
1⤵
PID:563

/usr/sbin/system_profiler
/usr/sbin/system_profiler SPConfigurationProfileDataType
1⤵
PID:565

/usr/sbin/system_profiler
/usr/sbin/system_profiler SPConfigurationProfileDataType -detailLevel mini -timeout 15 -xml
1⤵
PID:568

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=105"
1⤵
PID:570

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=111"
1⤵
PID:571

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=110"
1⤵
PID:572

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=115"
1⤵
PID:573

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=110"
1⤵
PID:574

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=21" "--launch-time-ticks=324440742" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=121"
1⤵
PID:575

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksfetch
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksfetch
1⤵
PID:576

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksfetch
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksfetch
1⤵
PID:577

/usr/bin/hdiutil
/usr/bin/hdiutil isencrypted /tmp/KSDownloadAction.NHMm80D4WY/com.google.Keystone.dmg -plist
1⤵
PID:578

/usr/bin/hdiutil
/usr/bin/hdiutil isencrypted /tmp/KSDownloadAction.NHMm80D4WY/com.google.Keystone.dmg -plist
1⤵
PID:579

/usr/bin/hdiutil
/usr/bin/hdiutil imageinfo /tmp/KSDownloadAction.NHMm80D4WY/com.google.Keystone.dmg -plist
1⤵
PID:580

/usr/libexec/xpcproxy
xpcproxy com.apple.hdiejectd
1⤵
PID:581

/System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd
1⤵
PID:581

/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid C8B65174-31E3-4263-83B9-38C90AE398BC
1⤵
PID:582

/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid C8B65174-31E3-4263-83B9-38C90AE398BC -post-exec 4
1⤵
PID:583

/usr/bin/hdiutil
/usr/bin/hdiutil attach /tmp/KSDownloadAction.NHMm80D4WY/com.google.Keystone.dmg -plist -readonly -noverify -nobrowse -mountpoint /tmp/KSInstallAction.9ZAEJMcEsd/m
1⤵
PID:584

/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid FD44FEF2-FE1D-4FF2-8CAC-A568BBE471AB
1⤵
PID:585

/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid FD44FEF2-FE1D-4FF2-8CAC-A568BBE471AB -post-exec 4
1⤵
PID:586

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk3s2 removable readonly
1⤵
PID:587

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk3s2
1⤵
PID:588

/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs
/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk3s2
1⤵
PID:589

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk3s2 removable readonly
1⤵
PID:590

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk3s2
1⤵
PID:591

/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs
/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk3s2
1⤵
PID:592

/sbin/mount
/sbin/mount -t hfs -o "-u=99,-g=99,-m=755,nodev,noowners,nosuid,rdonly,nobrowse" /dev/disk3s2 /private/tmp/KSInstallAction.9ZAEJMcEsd/m
1⤵
PID:593
- /sbin/mount_hfs
  /sbin/mount_hfs -u 99 -g 99 -m 755 -o nodev -o noowners -o nosuid -o rdonly -o nobrowse /dev/disk3s2 /private/tmp/KSInstallAction.9ZAEJMcEsd/m
  2⤵
  PID:594

/tmp/KSInstallAction.9ZAEJMcEsd/m/.keystone_install
/tmp/KSInstallAction.9ZAEJMcEsd/m/.keystone_install /tmp/KSInstallAction.9ZAEJMcEsd/m
1⤵
PID:596
- /usr/bin/env
  env
  2⤵
  PID:597
- /tmp/KSInstallAction.9ZAEJMcEsd/m/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
  /tmp/KSInstallAction.9ZAEJMcEsd/m/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --install --system --enable-logging "--vmodule=*/chrome/updater/*=2"
  2⤵
  PID:598

/private/tmp/KSInstallAction.9ZAEJMcEsd/m/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
/private/tmp/KSInstallAction.9ZAEJMcEsd/m/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/126.0.6462.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=126.0.6462.0" "--handshake-fd=5"
1⤵
PID:1.8446744073709552e+19

/usr/libexec/xpcproxy
xpcproxy com.apple.ViewBridgeAuxiliary
1⤵
PID:602

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
1⤵
PID:602

/bin/launchctl
/bin/launchctl bootout system /Library/LaunchDaemons/com.google.GoogleUpdater.wake.system.plist
1⤵
PID:603

/bin/launchctl
/bin/launchctl bootstrap system /Library/LaunchDaemons/com.google.GoogleUpdater.wake.system.plist
1⤵
PID:604

/Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Helpers/launcher
"/Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Helpers/launcher" --internal
1⤵
PID:605

/Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
GoogleUpdater --server "--service=update-internal" --system
1⤵
PID:0
- /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
  "/Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/126.0.6462.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=126.0.6462.0" "--handshake-fd=5"
  2⤵
  PID:1.8446744073709552e+19
- /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksinstall
  /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksinstall --uninstall
  2⤵
  PID:610
- /bin/launchctl
  /bin/launchctl asuser 502 /bin/launchctl unload -S Aqua /Library/LaunchAgents/com.google.keystone.agent.plist
  2⤵
  PID:611
- /bin/launchctl
  /bin/launchctl unload -S Aqua /Library/LaunchAgents/com.google.keystone.agent.plist
  2⤵
  PID:611
- /bin/launchctl
  /bin/launchctl asuser 502 /bin/launchctl unload -S Aqua /Library/LaunchAgents/com.google.keystone.xpcservice.plist
  2⤵
  PID:612
- /bin/launchctl
  /bin/launchctl unload -S Aqua /Library/LaunchAgents/com.google.keystone.xpcservice.plist
  2⤵
  PID:612
- /bin/launchctl
  /bin/launchctl asuser 502 /bin/launchctl stop com.google.keystone.user.agent
  2⤵
  PID:613
- /bin/launchctl
  /bin/launchctl stop com.google.keystone.user.agent
  2⤵
  PID:613
- /bin/launchctl
  /bin/launchctl error 3
  2⤵
  PID:614
- /bin/launchctl
  /bin/launchctl asuser 502 /bin/launchctl stop com.google.keystone.user.xpcservice
  2⤵
  PID:615
- /bin/launchctl
  /bin/launchctl stop com.google.keystone.user.xpcservice
  2⤵
  PID:615
- /bin/launchctl
  /bin/launchctl error 3
  2⤵
  PID:616
- /bin/launchctl
  /bin/launchctl unload /Library/LaunchDaemons/com.google.keystone.daemon.plist
  2⤵
  PID:617
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=79"
  2⤵
  PID:618
- /usr/sbin/pkgutil
  /usr/sbin/pkgutil --forget com.google.pkg.Keystone
  2⤵
  PID:619
- /usr/sbin/pkgutil
  /usr/sbin/pkgutil --forget com.google.pkg.UninstallKeystone
  2⤵
  PID:620
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=79"
  2⤵
  PID:621
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=24" "--launch-time-ticks=344016257" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=79"
  2⤵
  PID:622
- /usr/sbin/pkgutil
  /usr/sbin/pkgutil --forget com.google.pkg.NukeKeystone
  2⤵
  PID:623
- /usr/bin/sudo
  /usr/bin/sudo -n -u "#502" -- /usr/bin/defaults delete com.google.Keystone.Agent
  2⤵
  PID:624
- - /usr/bin/defaults
    /usr/bin/defaults delete com.google.Keystone.Agent
    3⤵
    PID:625
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=119"
  2⤵
  PID:627
- /usr/libexec/xpcproxy
  xpcproxy com.apple.PerformanceAnalysis.animationperfd
  2⤵
  PID:630
- /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
  /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
  2⤵
  PID:630
- /usr/libexec/xpcproxy
  xpcproxy com.apple.ReportCrash.Root
  2⤵
  PID:632
- /System/Library/CoreServices/ReportCrash
  /System/Library/CoreServices/ReportCrash daemon
  2⤵
  PID:632
- /usr/libexec/xpcproxy
  xpcproxy com.apple.ReportMemoryException
  2⤵
  PID:633
- /usr/libexec/ReportMemoryException
  /usr/libexec/ReportMemoryException
  2⤵
  PID:633
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=68"
  2⤵
  PID:636
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=120"
  2⤵
  PID:638
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=68"
  2⤵
  PID:639
- /bin/sh
  sh -c /usr/sbin/kextstat
  2⤵
  PID:640
- /bin/bash
  sh -c /usr/sbin/kextstat
  2⤵
  PID:640
- /usr/sbin/kextstat
  /usr/sbin/kextstat
  2⤵
  PID:640
- /usr/libexec/xpcproxy
  xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
  2⤵
  PID:642
- /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
  /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
  2⤵
  PID:642
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=68"
  2⤵
  PID:643
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=30" "--launch-time-ticks=414075118" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=105"
  2⤵
  PID:644
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=31" "--launch-time-ticks=423984109" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=105"
  2⤵
  PID:645
- /usr/libexec/xpcproxy
  xpcproxy com.apple.speech.speechsynthesisd
  2⤵
  PID:646
- /System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd
  /System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd
  2⤵
  PID:646
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=audio.mojom.AudioService" "--lang=en-GB" "--service-sandbox-type=audio" --message-loop-type-ui --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=105"
  2⤵
  PID:647
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Plugin).app/Contents/MacOS/Google Chrome Helper (Plugin)
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Plugin).app/Contents/MacOS/Google Chrome Helper (Plugin)" "--type=utility" "--utility-sub-type=video_capture.mojom.VideoCaptureService" "--lang=en-GB" "--service-sandbox-type=none" --message-loop-type-ui --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072"
  2⤵
  PID:648
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=131"
  2⤵
  PID:649
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=131"
  2⤵
  PID:650
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=131"
  2⤵
  PID:651
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=105"
  2⤵
  PID:652
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=130"
  2⤵
  PID:654
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=105"
  2⤵
  PID:657
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=130"
  2⤵
  PID:666
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=41" "--launch-time-ticks=481595029" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=80"
  2⤵
  PID:667
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=42" "--launch-time-ticks=482231068" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=132"
  2⤵
  PID:668
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=43" "--launch-time-ticks=488079763" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=80"
  2⤵
  PID:671
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=chrome.mojom.FileUtilService" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=80"
  2⤵
  PID:675
- /usr/libexec/xpcproxy
  xpcproxy com.apple.xpc.launchd.oneshot.0x10000001.DiskImageMounter
  2⤵
  PID:676
- /System/Library/CoreServices/DiskImageMounter.app/Contents/MacOS/DiskImageMounter
  /System/Library/CoreServices/DiskImageMounter.app/Contents/MacOS/DiskImageMounter -psn_0_200753
  2⤵
  PID:676
- /usr/libexec/xpcproxy
  xpcproxy com.apple.XprotectFramework.AnalysisService 517
  2⤵
  PID:677
- /System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
  /System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
  2⤵
  PID:677
- /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
  /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid D3327D13-CCD3-4478-8264-E44EB0DB8F9F
  2⤵
  PID:678
- /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
  /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid D3327D13-CCD3-4478-8264-E44EB0DB8F9F -post-exec 4
  2⤵
  PID:679
- /System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent
  "/System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent" D3327D13-CCD3-4478-8264-E44EB0DB8F9F
  2⤵
  PID:680
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=80"
  2⤵
  PID:681
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk4s1 removable readonly
  2⤵
  PID:682
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk4s1
  2⤵
  PID:683
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk4s1
  2⤵
  PID:684
- /sbin/fsck_hfs
  /sbin/fsck_hfs -f -n /dev/disk4s1
  2⤵
  PID:685
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk4s1 removable readonly
  2⤵
  PID:686
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk4s1
  2⤵
  PID:687
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk4s1
  2⤵
  PID:688
- /sbin/mount
  /sbin/mount -t hfs -o "-u=502,-g=20,-m=755,nodev,noowners,nosuid,rdonly,quarantine" /dev/disk4s1 /Volumes/RobloxPlayerInstaller
  2⤵
  PID:689
- - /sbin/mount_hfs
    /sbin/mount_hfs -u 502 -g 20 -m 755 -o nodev -o noowners -o nosuid -o rdonly -o quarantine /dev/disk4s1 /Volumes/RobloxPlayerInstaller
    3⤵
    PID:690
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=127"
  2⤵
  PID:692
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=105"
  2⤵
  PID:694
- /usr/libexec/xpcproxy
  xpcproxy com.apple.xpc.launchd.oneshot.0x10000002.RobloxPlayerInstaller
  2⤵
  PID:695
- /Volumes/RobloxPlayerInstaller/RobloxPlayerInstaller.app/Contents/MacOS/RobloxPlayerInstaller
  /Volumes/RobloxPlayerInstaller/RobloxPlayerInstaller.app/Contents/MacOS/RobloxPlayerInstaller -psn_0_213044
  2⤵
  PID:695
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=127"
  2⤵
  PID:696
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=127"
  2⤵
  PID:697
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=50" "--launch-time-ticks=531231263" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=105"
  2⤵
  PID:701
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=51" "--launch-time-ticks=539028733" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=105"
  2⤵
  PID:702
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=chrome.mojom.FileUtilService" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=105"
  2⤵
  PID:703
- /usr/libexec/xpcproxy
  xpcproxy com.apple.xpc.launchd.oneshot.0x10000003.DiskImageMounter
  2⤵
  PID:704
- /System/Library/CoreServices/DiskImageMounter.app/Contents/MacOS/DiskImageMounter
  /System/Library/CoreServices/DiskImageMounter.app/Contents/MacOS/DiskImageMounter -psn_0_217141
  2⤵
  PID:704
- /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
  /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 75FEB1FE-3719-439F-8C9E-57E7CA0B7A1A
  2⤵
  PID:705
- /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
  /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 75FEB1FE-3719-439F-8C9E-57E7CA0B7A1A -post-exec 4
  2⤵
  PID:706
- /System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent
  "/System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent" 75FEB1FE-3719-439F-8C9E-57E7CA0B7A1A
  2⤵
  PID:707
- /usr/libexec/xpcproxy
  xpcproxy com.apple.mobile.keybagd
  2⤵
  PID:708
- /usr/libexec/keybagd
  /usr/libexec/keybagd -t 15
  2⤵
  PID:708
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk5s1 removable readonly
  2⤵
  PID:709
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk5s1
  2⤵
  PID:710
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk5s1
  2⤵
  PID:711
- /sbin/fsck_hfs
  /sbin/fsck_hfs -f -n /dev/disk5s1
  2⤵
  PID:712
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk5s1 removable readonly
  2⤵
  PID:713
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk5s1
  2⤵
  PID:714
- /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs
  /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk5s1
  2⤵
  PID:715
- /sbin/mount
  /sbin/mount -t hfs -o "-u=502,-g=20,-m=755,nodev,noowners,nosuid,rdonly,quarantine" /dev/disk5s1 "/Volumes/RobloxPlayerInstaller 1"
  2⤵
  PID:716
- - /sbin/mount_hfs
    /sbin/mount_hfs -u 502 -g 20 -m 755 -o nodev -o noowners -o nosuid -o rdonly -o quarantine /dev/disk5s1 "/Volumes/RobloxPlayerInstaller 1"
    3⤵
    PID:717
- /usr/libexec/xpcproxy
  xpcproxy com.apple.xpc.launchd.oneshot.0x10000004.RobloxPlayerInstaller
  2⤵
  PID:718
- /Volumes/RobloxPlayerInstaller 1/RobloxPlayerInstaller.app/Contents/MacOS/RobloxPlayerInstaller
  "/Volumes/RobloxPlayerInstaller 1/RobloxPlayerInstaller.app/Contents/MacOS/RobloxPlayerInstaller" -psn_0_225335
  2⤵
  PID:718
- /usr/libexec/xpcproxy
  xpcproxy com.apple.mobileassetd
  2⤵
  PID:720
- /usr/libexec/mobileassetd
  /usr/libexec/mobileassetd
  2⤵
  PID:720
- /usr/bin/unzip
  /usr/bin/unzip -o "/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/TemporaryItems/(A Document Being Saved By )/RobloxPlayer.zip"
  2⤵
  PID:721
- /bin/sh
  sh -c "defaults write com.apple.dock persistent-apps -array-add '<dict><key>tile-data</key><dict><key>file-data</key><dict><key>_CFURLString</key><string>/Applications/Roblox.app</string><key>_CFURLStringType</key><integer>0</integer></dict></dict></dict>'"
  2⤵
  PID:723
- /bin/bash
  sh -c "defaults write com.apple.dock persistent-apps -array-add '<dict><key>tile-data</key><dict><key>file-data</key><dict><key>_CFURLString</key><string>/Applications/Roblox.app</string><key>_CFURLStringType</key><integer>0</integer></dict></dict></dict>'"
  2⤵
  PID:723
- /usr/bin/defaults
  defaults write com.apple.dock persistent-apps -array-add "<dict><key>tile-data</key><dict><key>file-data</key><dict><key>_CFURLString</key><string>/Applications/Roblox.app</string><key>_CFURLStringType</key><integer>0</integer></dict></dict></dict>"
  2⤵
  PID:723
- /usr/libexec/xpcproxy
  xpcproxy com.apple.CalendarNotification.CalNCService 337
  2⤵
  PID:724
- /usr/libexec/xpcproxy
  xpcproxy com.apple.Dock.agent
  2⤵
  PID:725
- /System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
  /System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
  2⤵
  PID:725
- /System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
  /System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
  2⤵
  PID:724
- /usr/libexec/xpcproxy
  xpcproxy com.apple.dock.extra 725
  2⤵
  PID:726
- /System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
  /System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
  2⤵
  PID:726
- /usr/libexec/xpcproxy
  xpcproxy com.apple.siri.context.service
  2⤵
  PID:728
- /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
  /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
  2⤵
  PID:728
- /usr/libexec/xpcproxy
  xpcproxy com.apple.CallHistoryPluginHelper
  2⤵
  PID:729
- /System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
  /System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
  2⤵
  PID:729
- /usr/libexec/xpcproxy
  xpcproxy com.apple.secinitd
  2⤵
  PID:730
- /usr/libexec/secinitd
  /usr/libexec/secinitd
  2⤵
  PID:730
- /usr/libexec/xpcproxy
  xpcproxy com.apple.tccd
  2⤵
  PID:731
- /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
  /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
  2⤵
  PID:731
- /usr/libexec/xpcproxy
  xpcproxy com.apple.bird
  2⤵
  PID:732
- /System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
  /System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
  2⤵
  PID:732
- /usr/libexec/xpcproxy
  xpcproxy com.apple.sandboxd
  2⤵
  PID:733
- /usr/libexec/sandboxd
  /usr/libexec/sandboxd
  2⤵
  PID:733
- /Applications/Roblox.app/Contents/MacOS/RobloxPlayer
  /Applications/Roblox.app/Contents/MacOS/RobloxPlayer -firstLaunch true -isInstallerLaunch true
  2⤵
  PID:734
- /usr/libexec/xpcproxy
  xpcproxy com.apple.AddressBook.ContactsAccountsService
  2⤵
  PID:735
- /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
  /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
  2⤵
  PID:735
- /Applications/Roblox.app/Contents/MacOS/RobloxCrashHandler
  /Applications/Roblox.app/Contents/MacOS/RobloxCrashHandler --no-rate-limit --crashCounter Mac-ROBLOXPlayer-Crash --baseUrl https://www.roblox.com/ "--attachment=attachment_0.624.0.6240521_20240512T091217Z_Player_c068e_last.log=/Users/run/Library/Logs/Roblox/0.624.0.6240521_20240512T091217Z_Player_c068e_last.log" "--database=/Users/run/Library/Logs/Roblox/crashes" "--metrics-dir=/Users/run/Library/Logs/Roblox/crashes" "--url=https://uploads.backtrace.rbx.com/post" "--annotation=AppVersion=0.624.0.6240521" "--annotation=Format=minidump" "--annotation=RobloxChannel=production" "--annotation=RobloxGitHash=ce85e2d3116edeac8759c2321c39314dee13b8a2" "--annotation=RobloxProduct=RobloxPlayer" "--annotation=UniqueId=4705492810625418574" "--annotation=UploadPercentage=100" "--handshake-fd=5"
  2⤵
  PID:1.8446744071563117e+19
- /usr/libexec/xpcproxy
  xpcproxy com.apple.mobile.keybagd
  2⤵
  PID:742
- /usr/libexec/keybagd
  /usr/libexec/keybagd -t 15
  2⤵
  PID:742
- /usr/libexec/xpcproxy
  xpcproxy com.apple.spindump
  2⤵
  PID:743
- /usr/sbin/spindump
  /usr/sbin/spindump
  2⤵
  PID:743
- /usr/libexec/xpcproxy
  xpcproxy com.apple.tailspind
  2⤵
  PID:744
- /usr/libexec/xpcproxy
  xpcproxy com.apple.spindump_agent
  2⤵
  PID:745
- /usr/libexec/tailspind
  /usr/libexec/tailspind
  2⤵
  PID:744
- /usr/libexec/spindump_agent
  /usr/libexec/spindump_agent
  2⤵
  PID:745
- /usr/libexec/xpcproxy
  xpcproxy com.apple.PerformanceAnalysis.animationperfd
  2⤵
  PID:747
- /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
  /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
  2⤵
  PID:747
- /usr/libexec/xpcproxy
  xpcproxy com.apple.pbs
  2⤵
  PID:748
- /System/Library/CoreServices/pbs
  /System/Library/CoreServices/pbs
  2⤵
  PID:748
- /usr/libexec/xpcproxy
  xpcproxy com.apple.sysmond
  2⤵
  PID:749
- /usr/libexec/sysmond
  /usr/libexec/sysmond
  2⤵
  PID:749
- /usr/libexec/xpcproxy
  xpcproxy com.apple.suggestd
  2⤵
  PID:750
- /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
  /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
  2⤵
  PID:750
- /usr/libexec/xpcproxy
  xpcproxy com.apple.knowledge-agent
  2⤵
  PID:755
- /usr/libexec/knowledge-agent
  /usr/libexec/knowledge-agent
  2⤵
  PID:755
- /usr/libexec/xpcproxy
  xpcproxy com.apple.TextInputMenuAgent
  2⤵
  PID:756
- /System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent
  /System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent
  2⤵
  PID:756
- /usr/libexec/xpcproxy
  xpcproxy com.apple.TextInputSwitcher
  2⤵
  PID:757
- /System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher
  /System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher
  2⤵
  PID:757
- /usr/libexec/xpcproxy
  xpcproxy com.apple.nsurlstoraged
  2⤵
  PID:758
- /usr/libexec/nsurlstoraged
  /usr/libexec/nsurlstoraged --privileged
  2⤵
  PID:758
- /usr/libexec/xpcproxy
  xpcproxy com.apple.coreduetd
  2⤵
  PID:759
- /usr/libexec/coreduetd
  /usr/libexec/coreduetd
  2⤵
  PID:759
- /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=53" "--launch-time-ticks=642687427" --shared-files "--field-trial-handle=1718379636,r,8970012715732288767,17385084230784200295,131072" "--seatbelt-client=105"
  2⤵
  PID:760
- /usr/libexec/xpcproxy
  xpcproxy com.roblox.RobloxPlayer.3116
  2⤵
  PID:761
- /Applications/Roblox.app/Contents/MacOS/RobloxPlayer
  /Applications/Roblox.app/Contents/MacOS/RobloxPlayer
  2⤵
  PID:761
- /Applications/Roblox.app/Contents/MacOS/RobloxCrashHandler
  /Applications/Roblox.app/Contents/MacOS/RobloxCrashHandler --no-rate-limit --crashCounter Mac-ROBLOXPlayer-Crash --baseUrl https://www.roblox.com/ "--attachment=attachment_0.624.0.6240521_20240512T091250Z_Player_ce5fc_last.log=/Users/run/Library/Logs/Roblox/0.624.0.6240521_20240512T091250Z_Player_ce5fc_last.log" "--database=/Users/run/Library/Logs/Roblox/crashes" "--metrics-dir=/Users/run/Library/Logs/Roblox/crashes" "--url=https://uploads.backtrace.rbx.com/post" "--annotation=AppVersion=0.624.0.6240521" "--annotation=Format=minidump" "--annotation=RobloxChannel=production" "--annotation=RobloxGitHash=ce85e2d3116edeac8759c2321c39314dee13b8a2" "--annotation=RobloxProduct=RobloxPlayer" "--annotation=UniqueId=6575814066483326280" "--annotation=UploadPercentage=100" "--handshake-fd=5"
  2⤵
  PID:1.8446744071563117e+19
- /usr/libexec/xpcproxy
  xpcproxy com.roblox.RobloxPlayer.3116
  2⤵
  PID:767
- /Applications/Roblox.app/Contents/MacOS/RobloxPlayer
  /Applications/Roblox.app/Contents/MacOS/RobloxPlayer
  2⤵
  PID:767
- /Applications/Roblox.app/Contents/MacOS/RobloxCrashHandler
  /Applications/Roblox.app/Contents/MacOS/RobloxCrashHandler --no-rate-limit --crashCounter Mac-ROBLOXPlayer-Crash --baseUrl https://www.roblox.com/ "--attachment=attachment_0.624.0.6240521_20240512T091343Z_Player_26ab5_last.log=/Users/run/Library/Logs/Roblox/0.624.0.6240521_20240512T091343Z_Player_26ab5_last.log" "--database=/Users/run/Library/Logs/Roblox/crashes" "--metrics-dir=/Users/run/Library/Logs/Roblox/crashes" "--url=https://uploads.backtrace.rbx.com/post" "--annotation=AppVersion=0.624.0.6240521" "--annotation=Format=minidump" "--annotation=RobloxChannel=production" "--annotation=RobloxGitHash=ce85e2d3116edeac8759c2321c39314dee13b8a2" "--annotation=RobloxProduct=RobloxPlayer" "--annotation=UniqueId=2214685397178833813" "--annotation=UploadPercentage=100" "--handshake-fd=5"
  2⤵
  PID:1.8446744071563117e+19
- /usr/libexec/xpcproxy
  xpcproxy com.apple.systemprofiler
  2⤵
  PID:776
- /System/Applications/Utilities/System Information.app/Contents/MacOS/System Information
  "/System/Applications/Utilities/System Information.app/Contents/MacOS/System Information"
  2⤵
  PID:776
- /usr/libexec/xpcproxy
  xpcproxy com.apple.icloud.findmydeviced
  2⤵
  PID:778
- /usr/libexec/findmydeviced
  /usr/libexec/findmydeviced
  2⤵
  PID:778
- /usr/bin/csrutil
  /usr/bin/csrutil status
  2⤵
  PID:780
- /usr/libexec/xpcproxy
  xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
  2⤵
  PID:786
- /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
  /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
  2⤵
  PID:786
- /usr/libexec/xpcproxy
  xpcproxy com.apple.pluginkit.pkd
  2⤵
  PID:789
- /usr/libexec/pkd
  /usr/libexec/pkd
  2⤵
  PID:789
- /usr/libexec/xpcproxy
  xpcproxy com.apple.ReportMemoryException
  2⤵
  PID:793
- /usr/libexec/ReportMemoryException
  /usr/libexec/ReportMemoryException
  2⤵
  PID:793
- /usr/libexec/xpcproxy
  xpcproxy com.apple.storedownloadd
  2⤵
  PID:795
- /usr/libexec/xpcproxy
  xpcproxy com.apple.installd
  2⤵
  PID:796
- /System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
  /System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
  2⤵
  PID:796
- /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
  /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
  2⤵
  PID:795
- /usr/libexec/xpcproxy
  xpcproxy com.apple.system_installd
  2⤵
  PID:797
- /System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
  /System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
  2⤵
  PID:797
- /usr/libexec/xpcproxy
  xpcproxy com.apple.replayd
  2⤵
  PID:800
- /usr/libexec/replayd
  /usr/libexec/replayd
  2⤵
  PID:800
- /usr/libexec/xpcproxy
  xpcproxy com.apple.Safari.CacheDeleteExtension 788
  2⤵
  PID:801
- /Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension
  /Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension
  2⤵
  PID:801
- /usr/libexec/xpcproxy
  xpcproxy com.apple.systempreferences.2140
  2⤵
  PID:802
- /System/Applications/System Preferences.app/Contents/MacOS/System Preferences
  "/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"
  2⤵
  PID:802
- /usr/libexec/xpcproxy
  xpcproxy com.apple.metadata.mdwrite
  2⤵
  PID:803
- /usr/libexec/xpcproxy
  xpcproxy com.apple.AccountProfileRemoteViewService 802
  2⤵
  PID:804
- /System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
  /System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
  2⤵
  PID:804
- /System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
  /System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
  2⤵
  PID:805
- /System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
  /System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
  2⤵
  PID:806
- /System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
  /System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
  2⤵
  PID:807
- /System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
  /System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
  2⤵
  PID:808
- /System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
  /System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
  2⤵
  PID:809
- /usr/libexec/xpcproxy
  xpcproxy com.apple.CoreAuthentication.agent
  2⤵
  PID:811
- /usr/libexec/xpcproxy
  xpcproxy com.apple.nfcd
  2⤵
  PID:812
- /System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
  /System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
  2⤵
  PID:811
- /usr/libexec/nfcd
  /usr/libexec/nfcd
  2⤵
  PID:812
- /usr/libexec/xpcproxy
  xpcproxy com.apple.studentd
  2⤵
  PID:813
- /usr/libexec/studentd
  /usr/libexec/studentd
  2⤵
  PID:813
- /usr/libexec/xpcproxy
  xpcproxy com.apple.preferences.softwareupdate.remoteservice 802
  2⤵
  PID:814
- /System/Library/PreferencePanes/SoftwareUpdate.prefPane/Contents/XPCServices/com.apple.preferences.softwareupdate.remoteservice.xpc/Contents/MacOS/com.apple.preferences.softwareupdate.remoteservice
  /System/Library/PreferencePanes/SoftwareUpdate.prefPane/Contents/XPCServices/com.apple.preferences.softwareupdate.remoteservice.xpc/Contents/MacOS/com.apple.preferences.softwareupdate.remoteservice
  2⤵
  PID:814
- /usr/libexec/xpcproxy
  xpcproxy com.apple.softwareupdated
  2⤵
  PID:815
- /System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
  "/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated"
  2⤵
  PID:815
- /usr/libexec/xpcproxy
  xpcproxy com.apple.suhelperd
  2⤵
  PID:816
- /System/Library/CoreServices/Software Update.app/Contents/Resources/suhelperd
  "/System/Library/CoreServices/Software Update.app/Contents/Resources/suhelperd"
  2⤵
  PID:816
- /System/Library/SystemConfiguration/PrinterNotifications.bundle/Contents/MacOS/makequeues
  /System/Library/SystemConfiguration/PrinterNotifications.bundle/Contents/MacOS/makequeues -z
  2⤵
  PID:819
- /usr/libexec/xpcproxy
  xpcproxy com.apple.SoftwareUpdateNotificationManager
  2⤵
  PID:821
- /System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/SoftwareUpdateNotificationManager.app/Contents/MacOS/SoftwareUpdateNotificationManager
  /System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/SoftwareUpdateNotificationManager.app/Contents/MacOS/SoftwareUpdateNotificationManager
  2⤵
  PID:821
- /usr/libexec/xpcproxy
  xpcproxy com.apple.rtcreportingd
  2⤵
  PID:822
- /usr/libexec/rtcreportingd
  /usr/libexec/rtcreportingd
  2⤵
  PID:822
- /usr/libexec/xpcproxy
  xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
  2⤵
  PID:823
- /usr/libexec/neagent
  /usr/libexec/neagent
  2⤵
  PID:823
- /usr/libexec/xpcproxy
  xpcproxy com.apple.audio.systemsoundserverd
  2⤵
  PID:826
- /usr/sbin/systemsoundserverd
  /usr/sbin/systemsoundserverd
  2⤵
  PID:826
- /usr/libexec/xpcproxy
  xpcproxy com.apple.audio.AudioComponentRegistrar
  2⤵
  PID:827
- /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
  /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
  2⤵
  PID:827
- /usr/libexec/xpcproxy
  xpcproxy com.apple.security.agent
  2⤵
  PID:829
- /System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent
  /System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent
  2⤵
  PID:829
- /usr/libexec/xpcproxy
  xpcproxy com.apple.CoreAuthentication.daemon
  2⤵
  PID:830
- /System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
  /System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
  2⤵
  PID:830
- /usr/libexec/xpcproxy
  xpcproxy com.apple.security.authhost.00000000-0000-0000-0000-0000000186A6
  2⤵
  PID:831
- /System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost
  /System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost
  2⤵
  PID:831
- /usr/libexec/xpcproxy
  xpcproxy com.apple.AccountPolicyHelper
  2⤵
  PID:832
- /System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
  /System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
  2⤵
  PID:832
- /usr/libexec/xpcproxy
  xpcproxy com.apple.AppStore.1900
  2⤵
  PID:835
- /System/Applications/App Store.app/Contents/MacOS/App Store
  "/System/Applications/App Store.app/Contents/MacOS/App Store"
  2⤵
  PID:835
- /usr/libexec/xpcproxy
  xpcproxy com.apple.storeuid
  2⤵
  PID:836
- /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
  /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
  2⤵
  PID:836
- /usr/libexec/xpcproxy
  xpcproxy com.apple.adid
  2⤵
  PID:837
- /System/Library/PrivateFrameworks/CoreADI.framework/adid
  /System/Library/PrivateFrameworks/CoreADI.framework/adid
  2⤵
  PID:837
- /usr/libexec/xpcproxy
  xpcproxy com.apple.ReportCrash.Root
  2⤵
  PID:838
- /System/Library/CoreServices/ReportCrash
  /System/Library/CoreServices/ReportCrash daemon
  2⤵
  PID:838
- /usr/libexec/xpcproxy
  xpcproxy com.apple.ReportMemoryException
  2⤵
  PID:839
- /usr/libexec/ReportMemoryException
  /usr/libexec/ReportMemoryException
  2⤵
  PID:839
- /usr/libexec/xpcproxy
  xpcproxy com.apple.coremedia.videodecoder 835
  2⤵
  PID:840
- /System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
  /System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
  2⤵
  PID:840
- /bin/sh
  sh -c /usr/sbin/kextstat
  2⤵
  PID:842
- /bin/bash
  sh -c /usr/sbin/kextstat
  2⤵
  PID:842
- /usr/sbin/kextstat
  /usr/sbin/kextstat
  2⤵
  PID:842
- /usr/libexec/xpcproxy
  xpcproxy com.apple.geod
  2⤵
  PID:843
- /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
  /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
  2⤵
  PID:843
- /usr/libexec/xpcproxy
  xpcproxy com.apple.geod
  2⤵
  PID:844
- /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
  /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
  2⤵
  PID:844
- /usr/libexec/xpcproxy
  xpcproxy com.apple.secinitd
  2⤵
  PID:845
- /usr/libexec/secinitd
  /usr/libexec/secinitd
  2⤵
  PID:845
- /usr/libexec/xpcproxy
  xpcproxy com.apple.cfprefsd.xpc.agent
  2⤵
  PID:846
- /usr/sbin/cfprefsd
  /usr/sbin/cfprefsd agent
  2⤵
  PID:846

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

T1569

Launchctl

T1569.001

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Info.plist

Path /Applications/Roblox.app/Contents/Info.plist
Size 2KB
SHA256 a7f394a158a8f7b7c4c634bff56d0f531c76ce8fb0c1023accb26d49d2e03fe4
MD5 c4eab6bace3b6b19b4ff0564517ea2b8
SHA1 0f5f1c013f4a40d3c1d56b8b4c42063ee3fa72ed
SHA512 df1d160765af923e075357d87708121f85b8e59dc14d2cf5d4c41761fcdfc1bce89f6e19d4c25679c14293d1f8796f1cb2a858c7d7723a45c3c702cc200ee0cd
MD5 SHA1 SHA512

Submit Download

RobloxPlayer

Path /Applications/Roblox.app/Contents/MacOS/RobloxPlayer
Size 77.9MB
SHA256 31ab89f1b9c4f466ac0906ceb12a41969fdf1a064bfc621d89364b40dcbdd076
MD5 06bf967186856f56b70484c5e6b9b38a
SHA1 318e15c1dffa0edb6d0093e77b08f36fa1415e16
SHA512 de60b9e670359851ba6cad3f7bdde4d4fa7cddd90a273032bf4081ed9fb81245d4d64a81ca396c37dae83d8609ed06bd507421d7174c213fade4a7230f46da36
SSDEEP 786432:uyFQtjlrHrlYYygWK9pHhvcgqMGRLdn60IUgBB/dKYxpL+w:uyFQpNHrlDWgqMGRV6bUQjxpq
MD5 SHA1 SHA512 SSDEEP

Submit Download

Info.plist

Path /Applications/Roblox.app/Contents/MacOS/RobloxPlayerInstaller.app/Contents/Info.plist
Size 1KB
SHA256 5c0c545d59348950453283bd5c1f5347baa86b09dfadf37c6b0b2e8ad412ac03
MD5 1befc6468c87fd66f1fd4b0e0028a06a
SHA1 5b39489ef8593a2eeec5de4e6496a8955f909e66
SHA512 5d5fb290d78fcae51ae91a662706966a85c045f18e7aec2292fb9d3cded557af24e9af37f60563a9220f9d77a49610a7a7cbf5511cc045dc9763df208c6bf87d
MD5 SHA1 SHA512

Submit Download

keyedobjects-101300.nib

Path /Applications/Roblox.app/Contents/Resources/MainMenu.nib/keyedobjects-101300.nib
Size 6KB
SHA256 a43d4e9631fe5d38dd0dfdbb1f02ba1579db05cf60034872995eae77fca1001b
MD5 52e9aa2ce96310ad5ee0ce29b01384fe
SHA1 ee2801e46b60b2d7be07f38a8ed96d80c7942b77
SHA512 50e5250fbc7d140217fa0e32482d168f3862c7b6297a66ef0d04d210d4ed4ff3a9664f2fc269307219b364cb6aba33415a7481fefcc95479f9955752135212c3
SSDEEP 96:50N14M0sU6tDjGPpZyz5d8JL8GwNObq0mLOnvf/L:50N1U16IPpW5d8k6BtnD
MD5 SHA1 SHA512 SSDEEP

Submit Download

NotoSansCJKjp-Regular.otf

Path /Applications/Roblox.app/Contents/Resources/PlatformContent/pc/fonts/NotoSansCJKjp-Regular.otf
Size 15.7MB
SHA256 f18253affd968c8ea592d8df6d84b1d4c5d3a46d267e53a1f6749e6c4f76a23d
MD5 7ed4b9a7daaf1d1c71903a92059434fb
SHA1 03d1f98398da4ba4137aa177d419a2240ebe17fe
SHA512 993b2457eb9b9ffa3f023e9bfac77f97444df196047951dd22de0fa683b97eb5ff46fc01bb34697c9307794b0f9d8a24fbff531416bfd7d11597a8cfac891c61
SSDEEP 393216:WaxAaLuP4Khf/ypeQIesikPbvTuYbRvl8bJTimvAOopd/NtZCnpI4w1FT1IixLtv:WlaCP46f/ZQIykPbruYlvl8F//YhJCnM
MD5 SHA1 SHA512 SSDEEP

Submit Download

AccanthisADFStd-Regular.otf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/AccanthisADFStd-Regular.otf
Size 50KB
SHA256 1b1dc599e4cd0270a3e3ec83fc8da18a21d9d69243732911e2153b977563ed89
MD5 88dcf05553ababe5c8eb2d5994f4f03a
SHA1 1b84dd4ec6b702f2f936e71455f95a06d2a638e6
SHA512 64632b13365af34a67e37e92bb78a480642287419083c10d6308b976bd0c5225e4fac4611adb818a45456b083e7a6fdcba06849e6c81be7ae828d6ca07b907ec
SSDEEP 1536:dRx7+QKj9AcsaWpalAdSOgQma2mZxNWd6gV9Ie:dRxRKhsd8AdSOlma2mZK9Ie
MD5 SHA1 SHA512 SSDEEP

Submit Download

AmaticSC-Bold.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/AmaticSC-Bold.ttf
Size 142KB
SHA256 42bfc1204f0e9e28514c7b8b22a68f81b799055dbe665f58449517ae9377f162
MD5 8ba765ce9580a3bdae76b59130d0ef8a
SHA1 e92bb7d613bead5c6c7e6b6718611e04c8f75c31
SHA512 82db60d7b05ee09097bf4622ff82135fe7d82252ce9b15b310cf8fa19813492a9f3fabcbb3ab28d397a2d583916681b9ab615b7445d42db30666e4c1cc974c46
SSDEEP 3072:D5HVe20vKSpQNvw9MlHOOlUxL8SXcBUvMljhUOfqJyTnllMuj31km3:uJ9MAOlUxgOEUuHnTxlkk
MD5 SHA1 SHA512 SSDEEP

Submit Download

AmaticSC-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/AmaticSC-Regular.ttf
Size 138KB
SHA256 136f5049b2d01fb10c69ac34e8edf5b2bd2cf471605f397c33353298ebd281ef
MD5 e9a42e339f93a719c17be53c386dbbfb
SHA1 1d743cede4938e97e0797bd4a6303c9f4dc2c9e7
SHA512 811cb29d8c1e3ecb6d3ae817fca30d1e0562efbc2a6240b8e6f0430e89798505cc9d118bfecc8a4d68fbcc531135b3390bc7b32dede2446ffd58739b9ab7ee36
SSDEEP 3072:iDjHVo9Rll+/3WTY7h8go+QaDnyPdrrU3T/wx/3:kbVgROfWTY7e+QaDnyPlQTIxf
MD5 SHA1 SHA512 SSDEEP

Submit Download

Arimo-Bold.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Arimo-Bold.ttf
Size 310KB
SHA256 ad88e47fa64708183695e3039a3a2d7699f212b6a1ba5f6cd6a5eb37ca71bea5
MD5 a0ffdc02427eba7e57df5d5c32836515
SHA1 55cd1f277429c65e26433da5d122044142f76d58
SHA512 31276de0322bd332f7ec24037d648b4007645ff1caea58aebdd9fa842f6f1341f13b287cef961495832a4004a0824df4ba7135d6f7484b3b3c92fb51cb8adf82
SSDEEP 6144:jEtjQVR5YvZImRrnZIKGNvrWK+hXygTgAA:/V/stJnGFx+hi2A
MD5 SHA1 SHA512 SSDEEP

Submit Download

Arimo-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Arimo-Regular.ttf
Size 310KB
SHA256 f770502d7caad307e5b2131d4d763e22ed506ae4eb93775e29667bd0f8d3af1f
MD5 d9cc167ee50270d831c5f35ea5018f14
SHA1 c7d2ac919d1331a6340279e18d15f5de4c8f3df6
SHA512 9e1fb900765d58e44998af139f4f854bcf5888ece5a264856ebbf7a50cdded9e37fb9ede2226f9557dc04e1d564f2e3016f82fffc88e154a34279daf518851a3
SSDEEP 6144:APwrDTqTUbweajsa86FvjN09xlxoM2FPtMmbETOIpK:A1TUbgjRdjm9L2nNtMmbETO/
MD5 SHA1 SHA512 SSDEEP

Submit Download

Balthazar-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Balthazar-Regular.ttf
Size 27KB
SHA256 4aa52d4d4a747b7688bdba35c764a7006d4d2915e6159aa1b8c979c9f4dc7b2d
MD5 34350f5a8e0786c9dd188652d6a4561f
SHA1 16b75de35858edd71bcd3a6343a1ae045bf2c9a4
SHA512 4101dae05158e1361fede638048d54396849b2973995b6555e6b8a3082b863c2282e73af81f43e822fca272ccfd2d5974cbc4bf85a56fd503903caf32ee1bd5c
SSDEEP 768:D2iaGgaxXaqyf8LHlNb6FsHPK10rkzm+aUN0S6O/knnmDcT:IGgaxAf8zlNmUPG0omO/knn5
MD5 SHA1 SHA512 SSDEEP

Submit Download

Bangers-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Bangers-Regular.ttf
Size 93KB
SHA256 6c5874194064636ba5247288704aa31f3b48345df405598a0f4cee4b066a7009
MD5 a82040ecf06139df2f3e653326b3420c
SHA1 9daec45b172c31cb853af4d5614f9616c7554ddd
SHA512 21afebce48e2100318cf6baad8c1dbab0d5cdf8d2475c47d572ac9a9329912e24dcfb75e9f35afd1398b4e9cfa06874b7fd37085fb72dc5678e71ee99612824c
SSDEEP 1536:0ygrbgCzwpi9o51NhnEP58Zz5MsYlgkb6yu7rgKtIDN6y30z9RQpM2VVy/HEQ2Ei:0ygpsNhnEPuMsYlse6em2VVy/HAFqzrM
MD5 SHA1 SHA512 SSDEEP

Submit Download

BuilderSans-Bold.otf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/BuilderSans-Bold.otf
Size 87KB
SHA256 1fc817029f1ee3d538df0fbbd4c9d7a0018b6483dc84a81e773950ba5cb5ab72
MD5 0b18032d4f6556a45c5b82bb2ff4522e
SHA1 d0be58ca9e6b02fe0491acb0d9f283b5249ae22b
SHA512 505e66649c8133c52415597712065ab21c687c98fa9c0a86aa4bf0bc78930e43051e6cff8d73a1c79490af65a402dd11fcb42b7a38349ba13b9f36669833515f
SSDEEP 1536:T21aMkaN23CIJi/FknL4Z6Tqe8YRrVQ7+VsjJ4Bf7i9ADz2fn8Px3g7Fr:ajN2yI6kL4Zuqe8eW7Vt4BTiSD5ur
MD5 SHA1 SHA512 SSDEEP

Submit Download

BuilderSans-ExtraBold.otf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/BuilderSans-ExtraBold.otf
Size 90KB
SHA256 afef7270772cffe33a06adbf9856dad7a49047a453cf9474b6fe292d9527bfe3
MD5 2fe112062effd22393e8e8f6414a41d0
SHA1 b3ea62f13a82aa91a5148a97b609a0b6b93121ac
SHA512 53a93df3b06df6634ebb4f431f128274592ab757ec5877b5ef98c397c944a293da3353d0e270c64590c706c4b0f797ba42f21ea506b9316357f3bef67f55c761
SSDEEP 1536:QIISyHcbh1+OwmUv/N4jnqXsh3SIe/v9EmBP8b1YZCWrDlY+lZenVEao6sOy2fkA:SHcbhIOEaXwV21ZWrD/lZOVomyqr
MD5 SHA1 SHA512 SSDEEP

Submit Download

BuilderSans-Medium.otf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/BuilderSans-Medium.otf
Size 89KB
SHA256 0652d29e83f354b616042859f3d6bbe036fda3a41b457c46a222917644274ce1
MD5 3c5d5eb859f041f8c09ab7654311bf46
SHA1 94cc993238ea1c96163449bd3727d5f5baee4709
SHA512 48c3501e64999d768d2e3f85bcacf1a53b92fd8cd523724ff290ecf19ee0e4231b493c632ec2bfbd593c335e1725826272739c365c33b2423046c61bdf968830
SSDEEP 1536:oEilY6IHvO8xVL2rNop+H7ctVllvgYXwk+sf22W1sK17nXUXUWU7TwNUAQr:ril4HvOgV5+H7ctVllYYXwk+NjkXr0Ce
MD5 SHA1 SHA512 SSDEEP

Submit Download

BuilderSans-Regular.otf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/BuilderSans-Regular.otf
Size 84KB
SHA256 800a536d491f90a3966b38de8384670300e2aeef88960875ca662691646be1cd
MD5 13615b04f7980e77626768001bf6bb77
SHA1 b6475ab60a78eaf0bf33f5858846ba338662048a
SHA512 dcf660cc6e10f4de060b6730ca3576e9f54c8921e7b4598737521d3b8f35cf96b40c09b6a43229f9d96577ba182a1bffbfef4adda45c60b601871dba0e500034
SSDEEP 1536:XMSeGsQvbosiyOPqYEeybKsY+XPCibLRUPULiSZdCSF+kinYJIulr:DsQvbxivqYryOl+54h60SFvLzr
MD5 SHA1 SHA512 SSDEEP

Submit Download

ComicNeue-Angular-Bold.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/ComicNeue-Angular-Bold.ttf
Size 61KB
SHA256 4025b2b948827b9f8b21bfd5c16e859ef28e2754a0be723463ef4944377ac298
MD5 3b3e96b257325929065b67d0b418b975
SHA1 e3db207650d87234fdf4821d0432cd2dde9e7fa6
SHA512 6d148220b75c6b52fe03ed0bd9d6edb97cc91dd0b6dd0a79a6ff2fa0fbed97d95f8e252c75e0e454614af479b98f4a6d527669389ec20cf5b4aec37b92781014
SSDEEP 1536:MxxxIRrHFAX6kSSQ1CCbhFLO1prvE5z4zKJ7N+KC:/fWx+15FLSdUzWBKC
MD5 SHA1 SHA512 SSDEEP

Submit Download

Creepster-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Creepster-Regular.ttf
Size 59KB
SHA256 af46f60f81e666d31db895554b2fe255fe6b896a899363edb713b7c714c204c3
MD5 2bcd50bbe90a02a290a9c8124800705d
SHA1 7d00ea50354f1d3364e6403054254586fbafc533
SHA512 f5f222f5eb746380be4cf35f68b780d341b4aa37417489f6fdfde2b6512926392efaba679db80973c7517b7cf03fa0f033e3b481ad89ab88e96663383f3430af
SSDEEP 1536:utjUMMzha1TwmDMW/25YSOLlHsBmSXtUBMX:uyI1Tax5YBhHSUq
MD5 SHA1 SHA512 SSDEEP

Submit Download

DenkOne-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/DenkOne-Regular.ttf
Size 42KB
SHA256 0a9c05025382f8a87673e4da53c7405181085bde4e133c9f47457291d8b61f15
MD5 9fd0681148cb3a73002450a9fd8ca02f
SHA1 6d63bf805a59cb385b526db87852ec0a2bc5b8fd
SHA512 38f0ebff5fe814a9e1b1e9d70f4564260388a334a8b280d7d39febe2910799e5da00243aaf7fa673accaa9d0ee770eff9984b9b10dda489c21fccd8a1187e540
SSDEEP 768:O4mz+BzXIhEZaZ4uUEGzehwmPuFfinGwARN7GIXdk85+Kz03+0mD:dzXIhE8FjGzemyuFfhd/5+KA4
MD5 SHA1 SHA512 SSDEEP

Submit Download

Fondamento-Italic.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Fondamento-Italic.ttf
Size 63KB
SHA256 5fe7c545c954c2373d2672433218d2c23770ea31968c5edcb82e517e82b10ceb
MD5 36af8b59c48687144be93058497a6c6c
SHA1 2f6f8b96b069cb37f1cbeb66b1c648f7ea969c89
SHA512 69faa22e74597e6b5d4806280f723134a1cbce3e04f0a840bca55068f732ac0725261b9fc2a1764abb5f6c4780f6b4030ef697126b41f3b31a2341250bee6938
SSDEEP 768:/aTVxXhiX4MLxHuwQkNPFLMqWkLegvR3d0qUAc8BtvcECMEKcjv1eT3wFw3vyy3l:/aBZ0rtdQkNPFLyf8LvqME43Byx8TlF
MD5 SHA1 SHA512 SSDEEP

Submit Download

Fondamento-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Fondamento-Regular.ttf
Size 82KB
SHA256 5d38593078871c7033cfe3187f40bd3717ab8311c7eff3bdb05adbdc32f716a6
MD5 69c96fca85944009c9dd72044b6252e2
SHA1 2a5e19708d224357eba2d36ab9a6b40a3632b822
SHA512 038a263c1b85c35c9f7d61142498e682396ab3e9fd3eb5dd7879b4a72ceb5e77ec3f89d26f2711fcd037c0568499500ae4c942cc798541aae624eb1cbcdfdd9e
SSDEEP 1536:ur6WEGHm8oucX2spDUEnMXN78uT6yuFnLPd8oyP3YcsRYsZiTIj:s6WEGHm8sPMp8G6zGZItgMj
MD5 SHA1 SHA512 SSDEEP

Submit Download

FredokaOne-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/FredokaOne-Regular.ttf
Size 41KB
SHA256 08a0193637baffaa1d9926085fe2a2716c1ce06136b74a9627e61663649c0f37
MD5 4a2f2ea45a0bb1abe81b47d0afde4aae
SHA1 a1e23edbf2b1640ca17ca5e863bf4508f3b404a7
SHA512 d4239ba7db8780eea66b2d425df2a4a0b82783cbb5389cc6a93b8d2373bc799641fb03346b370113c3bbb0c2be0ffdf5ef41a6fad2724260dbbe8dcc0182a4d7
SSDEEP 768:Hk4E3ZbXLZDkkDzq4uTYjfsfzWIBJaQYlk4iLrz/bR3Tm:EDZbXRkkn+yMa240zDRC
MD5 SHA1 SHA512 SSDEEP

Submit Download

GothamSSm-Black.otf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/GothamSSm-Black.otf
Size 128KB
SHA256 8c28d9fd31304a618d76ca95ce121f9d20844ca2d154ace0222b2f938b5ac709
MD5 a0f909749a0a60dd627776fbcd188875
SHA1 dabdab9b3c623cf578ba1c253c130960cc96fabb
SHA512 586edd19a67f2ae241db036c4ad650a9df4a18274d38be4044b6b582b74e399192fafb6c9e35d6ac40aaa5a77bbca1e2c35aa080db0d356ce4140ec5ffd942a1
SSDEEP 3072:kTSrYfMaxr5EKALGjyFFFFFFJ6nRpXgvCsXk5uY9:kTSrYUaN5FjY63i0h9
MD5 SHA1 SHA512 SSDEEP

Submit Download

GothamSSm-Bold.otf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/GothamSSm-Bold.otf
Size 125KB
SHA256 0e0e1b11f791666161be1df51bf2c338d78de5fae98e9f1c7231dc5f02283cd5
MD5 4efe66b7735599b207e789a7878aab87
SHA1 0e1c9d8cdc2dff5f727af222ffba379661d2c86d
SHA512 d4b5cadfe0c5bd841bc53fb087cb95c22a77ea572e5dabce76003ba064342fdd201b55011e844ffbda47fd1e67fe5f9d903698f0602a870a43bf2d9538fc9684
SSDEEP 3072:i8ruW0D2ooWxE5ZBklFTtV7I07qf/v1q19gBAP:i8rAqtYQKjTIGqP12wI
MD5 SHA1 SHA512 SSDEEP

Submit Download

GothamSSm-Book.otf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/GothamSSm-Book.otf
Size 123KB
SHA256 97bd09001c0dc97c7f47c4bd7a2ed2ef2efe3d6264fae21e3622bdf49228acb2
MD5 5fd222f7a89fdc326fd4ab5d8671cdc9
SHA1 b373fc1a331d7ed6487ffe20b84d67033175656f
SHA512 fcfbcfa34439100b8eadfedfd40d6b6c563356d322ff26aac9309119005bb4412012f25c81653136f9368794507635e7d34e0fe78d3b1de1b76cc4135f8e3d5a
SSDEEP 3072:GkervYLI79vY8RNYEGEpBYGADzRQg3SApImu:GkerQ0JguHYGeKgC8Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

GothamSSm-Medium.otf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/GothamSSm-Medium.otf
Size 125KB
SHA256 5613e4050d5f74507cedccde396912626e9bb945a5a95efc3ccd2e30b876c706
MD5 f2afb4c395f1bf4f604d816bc719664f
SHA1 3cc244f6f9142faea2bf2e8934aca1c10338de62
SHA512 e868f60eaab6534f31ec57e87bb6df2e1c3724b59a29c818054370e0c59c33823cb623f26f5ce63b9a53e2989d650ef30a7aada1d3e757f33c5388e22b089ec7
SSDEEP 1536:z2tsr1Pz1JPqy1Ot8N9ko+PKuMPuoB6USqnn5fnPBZ1GKjsTGDjwJEA:zwsrBTqi68UoDu/qZPBZ1G0eGD4
MD5 SHA1 SHA512 SSDEEP

Submit Download

GrenzeGotisch-Bold.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/GrenzeGotisch-Bold.ttf
Size 89KB
SHA256 b08613c5ceddc6804625be7e70acfe15f94bac2332ef9bc53e924bcab3a53f2a
MD5 ce8fde567d0b21da32919ebc47567e5a
SHA1 39fac638292e9a3a0e072fd5cb9a0b677a19f4d2
SHA512 bf27d0e792caeeff4fe528fe63c530511b051efb42284e02b755534cdf5519ccd0ecb801001ca24c0062b6a942e88b75a1734cea21793a63faf2ff33e2696998
SSDEEP 1536:rElEKdbp9UjaX2B6yweYN2SpZ0JZjByaV7zWoKDgXQwnOyraTosbaY5mPACAsG4A:gl9bDNX2B6yw70SnqZVyaV3pQwnOyraX
MD5 SHA1 SHA512 SSDEEP

Submit Download

GrenzeGotisch-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/GrenzeGotisch-Regular.ttf
Size 89KB
SHA256 886809f1e968877810560a5458120bfbc23e7e36b6f43f636e131a1de05e9688
MD5 301158bd09d1fd8a52924e81de52e40a
SHA1 59f9f5b118ac8bd4aca455afb6a59c471ef226cf
SHA512 e0d34e0ccfbe06c28979caa42c6b0047d0d87f95d07254da883874c27499026534274c294008206f375691a1df69cc44fac970e32bea1c7cf349716a229bedfd
SSDEEP 1536:MGwth6GyVwn08xiLvdl3V/qQ8XsJC+TkyMGqLi+ipSKKiK/O0/lGYwDXXQwnOyr/:MFtg3Vwn08xiLll3dQXsJC+TkBQKiK2V
MD5 SHA1 SHA512 SSDEEP

Submit Download

Guru-Regular.otf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Guru-Regular.otf
Size 679KB
SHA256 047afce7cedf4dfd7798373cd41afdbaaef14fcddbe194eae76e5d2c24a010f8
MD5 d44c7b9e06cfc2f3a216ef4cc8eea0ef
SHA1 bfe3ad2062a918ae45e879c675de9aba64ce0950
SHA512 7543f63f3e2a4717a85f362599250a29eec2978df5ea6dc0e7d1b575cafc431af4948f2fbf91b79ea9691beb594be25dd67018e8ff750864f3d4d7505b4ce8ca
SSDEEP 12288:OyZw6gTSxBean1nwv23vEffEWFmbe6XwN82Giyn4X0yeLk5muWoY4:9S2fEXEW6yeLaWi
MD5 SHA1 SHA512 SSDEEP

Submit Download

HWYGOTH.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/HWYGOTH.ttf
Size 51KB
SHA256 fc5d1101acaf2512e77c9247a86f63a459f49d7c0f7c795134f53c569ecc834c
MD5 734e5a726f37f261ff8a0d96260612a0
SHA1 0eb2e4ac258a6b2b256cc01defb44eda4b010a18
SHA512 a9232c272d247e502a6a00f3230517020592674e162b36a2cead8f30f4fcfcbb95d7391cbaa43787e2b12873cdcb37a5185f3ad8c9414b4b67ec43fc3d373876
SSDEEP 768:JbSD8qZ6RB18+aE4cH+cR0xtQ3ejvzoJy/T3UEoS06l5JaJBsbc+Lh:59RB18+aE4ceXAOzzog/Ld06l5JgBut
MD5 SHA1 SHA512 SSDEEP

Submit Download

Inconsolata-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Inconsolata-Regular.ttf
Size 78KB
SHA256 346eff8b8292ef2b8026cf1dbea3fc0c79eba444270d38d73da895ddcba74e15
MD5 b0639eb725c0df94f68b779889679457
SHA1 493154cb3884f5dcdfcac5515ea0db1f7281538f
SHA512 7aeb0b16def1e454735f40375099b636834eb838d518592f7869e58a587f8a5c7b7d2289c9edc812bf3390d8c9cbb124c2819e2b7e77e938b3396ba6472c4b41
SSDEEP 1536:8ud9q6UC4v/CiTzShkhsbttW7VLAnCaE1sT239F1j1d8mw11Kzv9s8K+zmAJZ4PB:PU6riCiTzShkhsLaLAIYEf1j1d85ivWt
MD5 SHA1 SHA512 SSDEEP

Submit Download

IndieFlower-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/IndieFlower-Regular.ttf
Size 54KB
SHA256 e92aceba3c95fabe12edf01ae248f613f6d97eef3bdb7009200cb3fae53df609
MD5 0841af952c807bdf56455b1addb4c7df
SHA1 43ffc60d2e2cbf0339578690623580ef40fe19cd
SHA512 8e80719f8cb1fb524628654f1e9dbea4022b416769d2d60768ab5232571bdc5e423e55bbafd04dd07a2afc3e3253c05f625288e007a199a15085abfd3554c3f2
SSDEEP 1536:hoq3KU8mhl4xnZ8o+0+V9pElyCvpoNYH0d9fL:hocKWhl4FZ8v0+V9pEsCv+2M
MD5 SHA1 SHA512 SSDEEP

Submit Download

JosefinSans-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/JosefinSans-Regular.ttf
Size 57KB
SHA256 31ed94e56b1225f07307210cc2ea46e2209b71fe284423f6929f9cdab124e86d
MD5 6762afeccd02d16a80409b78fb85251c
SHA1 1320915dbd19243be53f5458f1b6f2881efc7e67
SHA512 e2c2c24fbcb38e01c7cbbe2b1f5a7aa97710fd8b80cf6562454172df81935a706c67ca83cae97cb14da9925eb0a7475080db3c8e9b4b13e1a002e00d9e0bbd77
SSDEEP 1536:zMUYYoQxqk4dECAqByOds3B+WvNXZNetQutxBfyjvA7enWDO:dzvVZNetQTUO
MD5 SHA1 SHA512 SSDEEP

Submit Download

Jura-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Jura-Regular.ttf
Size 99KB
SHA256 a28ccb3191cfac12f4a32913514068fe86dd7e2c2ec0c9e415d713bb280b4355
MD5 f9955609f31e2896e60a338d0d0c39a9
SHA1 70c655a0ac6bee76c6b49f806d05a4edabfcf6bf
SHA512 0518594c7669a9cd00ac9fe3bb59b39b02b43f2e0553f708979d8502b138877b61e1f7ab519b7dbc10b702e33b88ea83d0ef7e6225a90bb2b97941134aa6659f
SSDEEP 1536:+vjJSPX/rD/v1n2WKtnlmFggzaKzYMNNa8tFGx/ybPNn3HyTDHHY4gL94AnpeWlV:itsXnn1n2GtC/ePp3HS44UsT+Y3rm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Kalam-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Kalam-Regular.ttf
Size 417KB
SHA256 01f2afba64989e383ce85bc0486debe2b643a5df542d58288566dbb2b23acadb
MD5 bea35746fb7cdd67b15ecf0622d8cc85
SHA1 160ae7d0e0ff1a1058156749109c9591909d5bd2
SHA512 680d94aed9b9651be776fe063b8bf637dce457c094ea794c0bb5f097e9f045428894a325b3edc6d390d12e7b53c77e531f4506c50ad55b5846d336309512866e
SSDEEP 6144:0mYZKsz6SYS/TTG/Ayc9QVMMz/JlLvQwADma0xskUNTuaX:0mYZJ6PCTTmDAQVrADb2skUB
MD5 SHA1 SHA512 SSDEEP

Submit Download

LuckiestGuy-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/LuckiestGuy-Regular.ttf
Size 56KB
SHA256 27642d3c0ef4bb18602b9b525df500d60f0c2c83b47f50512dd3aa48de0ea1a4
MD5 c6004be49628b1226eb31b068348d24f
SHA1 c2cf3b316ab503804183a1b7af2f46416369c363
SHA512 d9866e18f5fe38f6312138ce81ba6f50ca04826c435e7f83277b93b200eacfe288773931a6fff6dcb57cd5ca557210beea6eba05ddb8d45f4964e5ed4b274eb9
SSDEEP 1536:mc6f06ZnbVrgrUa0bAxVEZa7xZpSqonaDEDREhQVT/uoX25TjM1iXB:R686ZnbVrEUa0bAxuZa7xZpSqmD0QVut
MD5 SHA1 SHA512 SSDEEP

Submit Download

Merriweather-Italic.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Merriweather-Italic.ttf
Size 139KB
SHA256 fc70541c44ac2415a360ade6c244e918f45842ad3179d47ac35369ddae8e23f5
MD5 498bf4ee4ac9fab22ad9f814839173b2
SHA1 568f4f91b1210ec160e509fffca5d157fedacbf4
SHA512 6905ab59af1e07694b1efef5b40723c385e4bb6b812275ed523fb17ca926be0aa348225c41dea23df172cee1055e87e33834992425afa37ffd680863aafc55e2
SSDEEP 1536:mC/hI7pgbh4A446W4exu4RkbBRi/9awz5Qa4cubb3Aizmsyjx2TNfGFzYo9JSo:LI9g2A4iY4GKrQpbTYQTNqrSo
MD5 SHA1 SHA512 SSDEEP

Submit Download

Merriweather-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Merriweather-Regular.ttf
Size 145KB
SHA256 7a703adc03aa1d5d83c6c30b1deb1cb48aa99d432b5f257b46d35d22b3fd6fc1
MD5 c97a9fc29652bb4afcdac68020e5d0f7
SHA1 2cbe1abb3797149d593a90ced7e3c9fa99af50ca
SHA512 eae75545ca151994e55758a976e15e603d6f5b200959d493ecf660ef939915e730af2d325b7cd4837213aad5354d5a4a4860a92b0b2bfc1e76451eb3742286fd
SSDEEP 3072:rc/Tj5bWWelgis2hAku6RulT59fprF3o33Bv:rc/5bfelgis2va55DF30N
MD5 SHA1 SHA512 SSDEEP

Submit Download

Michroma-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Michroma-Regular.ttf
Size 61KB
SHA256 8e2522a39055cfee1bba775892d44141fbc048ece71e931f3c33fcd47446dfa1
MD5 11e1acfccb09dc1591601831bf1b82c4
SHA1 a4a7e58c9651e22120e629cbfea5258a00ff92f1
SHA512 90e9243f380a6b062e6d4f99c63d8a83a4954c4d06ffa681ef18da04af1e493285fd78d4f332094b7a6da686ce8bccc176972f8d4ec55a497ea0502223735375
SSDEEP 1536:ST5id0J5fLty+lYj0bmhPrgD6RxJakmTASB7rJP5ul:SFP5jty+aAbep+FJP5c
MD5 SHA1 SHA512 SSDEEP

Submit Download

Montserrat-Black.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Montserrat-Black.ttf
Size 193KB
SHA256 9d0664ef22c8dbedb44861879d1f6d53d53b1d0e37f4e8e4bcfc62fc0285005d
MD5 9c1278c56276b018109f295c1a751a69
SHA1 fca130f21601346cce37bb8a9526ff01af66d912
SHA512 46b541a15589b15ebe0b4f858fd380c00ccc4023fd3b071e80927c369c53a4938d8f6d194167908bebf4155197b8036323f5b7a4a6c5e57677754f8db1ecd393
SSDEEP 3072:LJODgCa4wEC5SP+CuNUi6T5Qcd1vOBYpnmcmKjtsHhC+of6MuFLBLY7S5dv8XYen:d0gCa4wEYNURiC1vO+plSzvSYtY
MD5 SHA1 SHA512 SSDEEP

Submit Download

Montserrat-Bold.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Montserrat-Bold.ttf
Size 193KB
SHA256 189aeb285be99f0b58e454dd2dc3cbf34a6db844a9ef26ebc5909178ff77c5be
MD5 1f023b349af1d79a72740f4cc881a310
SHA1 04052dc3b846609216de1e0cbcec337c6b6e74f6
SHA512 4a543b847e65cddab5053c919cfcb0638ec6784cf4bbce07c8494db6f53d5663115bacfa0a9adfec5979f5f51861644056711665850b83ca8f034a34c7c42646
SSDEEP 3072:Igj1cy1jVStFE2/eocyr1QpU5gmcmKjtsHhC+of6MuFLBLY7S5dvmCdujmYaznxt:Igj1cG8FEXofepsUSzv5ui7t
MD5 SHA1 SHA512 SSDEEP

Submit Download

Montserrat-Medium.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Montserrat-Medium.ttf
Size 193KB
SHA256 20ebfd658f55a256d60b4f84849e0026e4b599926493738ed3952c7200218d33
MD5 b3ba703c591edd4aad57f8f4561a287b
SHA1 6b57d12e018c64352e202f8ef3bf7f431f76d935
SHA512 0c5e564865eedc0a287cf514d738e918009fab7457d4f0a275a14ce8fc44e73333b53cdd61bfa2bc54a7fc0175ddf7947e6274d391f1d9abed451b6b24a8bff1
SSDEEP 3072:dBhWWD0hxQmZOyW6BmcmKjtsHhC+of6MuFLBLY7S5dvYKC0uWGbLmnxm:/hWdXOylnSzvYFMm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Montserrat-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Montserrat-Regular.ttf
Size 193KB
SHA256 dcfe8df29e553fbd655212f94300cb1e704c6cd147fa7a98cb4bcd9eb92c6707
MD5 3fe868a1a9930b59d94d2c1d79461e3c
SHA1 de57aa03e4821fdbe6c34ec2c895e8b5c914e837
SHA512 7f4e4855b789316cb645d43cd11b7a83b7b9e024a51aba3f1f41116b75eaf991cb680480264dc0fc6b9a7c5c13ceaed10c4a5a830ad1804d58ab8313a9b3044b
SSDEEP 3072:jlRlN++fLDZ9Rp7aLrmcmKjtsHhC+of6MuFLBLY7S5dveJkmZJnx9:5R6+fLDZbp72xSzveJkmZ39
MD5 SHA1 SHA512 SSDEEP

Submit Download

NotoNaskhArabicUI-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/NotoNaskhArabicUI-Regular.ttf
Size 274KB
SHA256 506409fd55a521fa145921772e946bafcef0e2582e54fd1517540798277d3b24
MD5 1f76d8d6960d002d6bf62ab89b64b40f
SHA1 9e052c6d098b4df3ef6b79f55ec206677d50bfc4
SHA512 1d35847c789dd0c0326b43404ffd812f49dc09f63bad7443f9e04d48b1675ceb573839d5ee1a43704cc3c047c7d7e0019bf4aa559bfaec83371d9fb9a43ed235
SSDEEP 3072:Jhjdk4nZJEI170IUFiEGNZCm9nnJNkIG+bSMJIi+qzrdT8WbXgqiSxz5c:JhhkIZR67y9nJ++bSMJIi+8rd7bX/lzc
MD5 SHA1 SHA512 SSDEEP

Submit Download

NotoSansBengaliUI-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/NotoSansBengaliUI-Regular.ttf
Size 186KB
SHA256 c074bbc92c33267768ed397ad4419778853fd0e806e907f3359719c8d53a8297
MD5 8940e5b149489458023b0992dfe347c7
SHA1 acce50f3a9634d3fe2bc33dac7fc72c590a0babf
SHA512 70379eba5dac39accf6fc09fd49af7c278918798176c7abadf1816a7bd7d7492432ba3e0e9d99aa9e0755741677f703e2e10e17af635cc56653d21271b727788
SSDEEP 3072:PVDtqJ0ngIPwcJavGmSPcwKhwC22W6C/ta2nwOSRazWrH8k1H9m3fqtmY8vRu/wZ:6GngIPw9emGcVwC2R/ta2nwOEazWrH8J
MD5 SHA1 SHA512 SSDEEP

Submit Download

NotoSansDevanagariUI-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/NotoSansDevanagariUI-Regular.ttf
Size 195KB
SHA256 5ddc66056fbc894bf66b191a02135b906eadf7871c60100575ad329362948667
MD5 4bd531977940a9ff13b28d42cd111db9
SHA1 da5e0c6806b2f01fc850e00ef8e4e971603ae697
SHA512 bca17cb465c1040ab7b529fa3272160bb1dd95ccd29cd6c8bb14b229760f32ff84ff34c7176d7f10081c4aec38eeafc0f1e1283df935f9699a98ae696240a86d
SSDEEP 6144:GpwcXIV1KQq90u23X+5Ad8ECYpnCHkMu3qNH/wY8xwIhjpilukrtupH:t+5Ad8UCHkMTR//8xwIhjpQuuY
MD5 SHA1 SHA512 SSDEEP

Submit Download

NotoSansGeorgian-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/NotoSansGeorgian-Regular.ttf
Size 40KB
SHA256 ad4a9552816a72905311ed88255e9afdf564f3ceff6894dddd3257b5c3fdd8d8
MD5 fdd15a9ba438b8ff71433b8b7c0d1831
SHA1 d242a1f9b22b9a7a3191137be059d82ab3dff3cd
SHA512 95fa08be485e8ed19a138b4204bde4255d3af0fad930989ec231f186ee987fe4dd3b6e90f99a0fba5184d2a5c10cfe7f42c3fcccada2ae6471107e858f0dd56e
SSDEEP 768:cvNUjsHsHo8eqlCFdH5rYbSTtKqlBU021kj1y7nZhvS38YU3Qrk:cvKex8eX5rSSTtKqlHtwDZJ5YU3r
MD5 SHA1 SHA512 SSDEEP

Submit Download

NotoSansKhmerUI-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/NotoSansKhmerUI-Regular.ttf
Size 73KB
SHA256 c100af4b836aa81707a56d6012ba9083c6a21d562178cf5e1bd8855056258285
MD5 1b477089a1b730f39510f59f18612ae6
SHA1 71af7312d37853dc68e4fda07849a352d3634376
SHA512 3704ce6c9e5406546da2dc91ab36d0675268baa51e9e33b8ae70319ce5f584f1891d3faf6b4fef3cdcdac2bc515cac4579d2f851347aa2d48d47770dee178f90
SSDEEP 1536:dbxJbTqQdY1FazC9o+2lFzL1L1Bkcusji+6:dbxJbukYO7+GzrBkcn6
MD5 SHA1 SHA512 SSDEEP

Submit Download

NotoSansMyanmarUI-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/NotoSansMyanmarUI-Regular.ttf
Size 186KB
SHA256 aa4cebf5ba28ffa3a3bb38e3d45b472fad42df754bba600c7f87168fca2f7e52
MD5 2097d437b372c3463775d4d51ebbe058
SHA1 46a28b576e852429d2b6cb417259ea8b7157dff3
SHA512 2afb1cbd226e24356329724f34254f5d6128b51113fda1c174c917ca641e262b58d1018d4d981545e34b8392756c0dd0ea4ee519bd4683f23dad4c7ba7511c1e
SSDEEP 3072:T/19Y4K6/vyb+AEqAWbgVdwbwucwACAeACwh2yonvUayIA3ATAkAGAEAY6qhDQ5Z:T/nYz6/KbuqxbAe0/wVTd7nvAIw8fJPq
MD5 SHA1 SHA512 SSDEEP

Submit Download

NotoSansSinhalaUI-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/NotoSansSinhalaUI-Regular.ttf
Size 302KB
SHA256 6ae00f6f97ef3feee343941ed76161b351743e3beb9f60cf8c81615b0a799827
MD5 3832a972a8b64eeea6db1538024d701b
SHA1 aae4c53b5e91c0020f82d38e9d7ea8b99e825b6d
SHA512 cc01aa631cf0a11beb8a2e00ed6a799bb32183e8121b9d1c20d2f1525b14b764b3f02b73a1cac0ef61dc337291b52669fa048e282f8c4a480698a15aa3a380f6
SSDEEP 6144:LW85Xivpq7i+yfma0mOqSW77McG7DjE5SAPdMz2BHlfBMPgMaC2ejabqCBePQ6Zn:yYXqpqe+oH0mO07ocGSSAGz8lfyg51et
MD5 SHA1 SHA512 SSDEEP

Submit Download

NotoSansThaiUI-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/NotoSansThaiUI-Regular.ttf
Size 38KB
SHA256 1e1c3c723eb35a3a8fc69749ec75073343cf731c9a6e8ce201343a1e1dfaff46
MD5 e411cbc8e9adf554a063d5a9af0a1106
SHA1 159173045fb37178d4e93c3f26938d736c67fabf
SHA512 512e7774277885f917a1f7cf52e5d7ccbd8dae2d6b56434349c8de2d4b923d9289aaa06ff83a660979639dbfd18ae9c7651b9526ac285fc6151f0db7eb2dd770
SSDEEP 768:OqyGDuAabaOR7YYWKOS+V+3Vz1fTOG31JmsMgv90rw:OqRHiZRUVKEV+3VzNlAY9/
MD5 SHA1 SHA512 SSDEEP

Submit Download

Nunito-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Nunito-Regular.ttf
Size 162KB
SHA256 022bea9b64e6afc9146cc03d85a19fe8cca08ab9119142f90ea4ceb1577cdaa8
MD5 d2e691bc4a2b696929172cb3d22ce8ba
SHA1 e0c06842837a4dd873581acbbc31290703a38a1c
SHA512 dad6bd6b3d04f9fae6fa96a2b3a507596a9b33521cb7f34dc7257a71ca1f31730e7a7c56fd010136e48f3950fb69e0f751c8d52ac7b70f2264f24504f047af6a
SSDEEP 3072:myAQbDMEoDadxRuSHQRlwmHpV1PDjanLoU+EKKnLnd4:AQuDmuS6J1PDkLKKnLnG
MD5 SHA1 SHA512 SSDEEP

Submit Download

Oswald-Bold.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Oswald-Bold.ttf
Size 89KB
SHA256 adecc04bd3ae99a835a7bae9de0f261fdd5a6da1630daf000602034fb142052b
MD5 e991dea9f65ce799dd72095ab7ad6e88
SHA1 f5f192160aded13df4b63640cd2da6cde0175ae2
SHA512 b75d9339ccadfae423c89f0aca0f807835aca136aa9dfba08511e7dcf59c337662e4b54ffa2a7d94bd800061c04e165f65dfe5796b9d327a7f0218872e5c6e9d
SSDEEP 1536:MTKOiJTYPG0MmFYyEHuax0o6Ag/HZgnFfL0ZtPuzzmSLW26w09:MTK7TYPGFmFYyMuax0o0HZgnFj07u2SY
MD5 SHA1 SHA512 SSDEEP

Submit Download

Oswald-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Oswald-Regular.ttf
Size 89KB
SHA256 264639732f5adf80fac1e4a9ef3f0eb58e58b5aead07850087662dedeba11b12
MD5 e1996192b98a516646ff9a8c0c0ca90c
SHA1 fae45bbd33c5881541f98444eeaaaa9f211daf07
SHA512 ff1f76218a6b3d9bbb0a944b730c608f1d0f361a7694d8cfb9abc76badc20ebe6f192f20a6f56e55d5a4cb7f2c8549e5e527a9c6a9faadc80facc582e317def7
SSDEEP 1536:IKRYJ1eupPr4Mej98WUWOpyqwCgxnFfL02tPuz4c91oEw05:yYKPrMj2WUWOpyqYnFj08uM81oED5
MD5 SHA1 SHA512 SSDEEP

Submit Download

PatrickHand-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/PatrickHand-Regular.ttf
Size 207KB
SHA256 5856ba98e5ce5add264e2671a72fe510601b1f733df39ed8be0cca344a3dbe59
MD5 eeb4dad66cf2ff3ee47b7ac7906913a0
SHA1 fc34dc610fe64c025b01cfc2eb1e17a73b11900e
SHA512 07f879e1d108f9985486252371f1c7864fe4d75219cdd1b30da0748518df24145eb3121074e54f9c2b6582b551d11b9e8a384eb1644777cbfec37cdf89d5a9d8
SSDEEP 3072:XbZAs6OBlUCvQZKEglngBEDVpms0Bx4syrJZYHm0YTcMKzdkKYS:rZHVvFfYEO3E0nzmKp
MD5 SHA1 SHA512 SSDEEP

Submit Download

PermanentMarker-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/PermanentMarker-Regular.ttf
Size 71KB
SHA256 4a613a4e0a67ad9c48ee6bbf664a59f73450069ad27c08d4ed21e1b9b1893590
MD5 c863f8028c2505f92540e0ba7c379002
SHA1 bc40bfbc7eb7715af82b136429848a3c7a83a2b3
SHA512 43ff0e0fd2bf0ec3c4b961f475da959204c2f56a5fd194ca1091c63195e008d41faf3a7f221c8b2e96823b586ca6cea1376cdb60a2acf0b29e774a24275d67a8
SSDEEP 1536:7Dyh6ULZbUZdRUHwotchh46EWrlXHIXRa2Fj0Epr73IttK:7Dyh60bS3hcWrJHEoSoQr73wtK
MD5 SHA1 SHA512 SSDEEP

Submit Download

PressStart2P-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/PressStart2P-Regular.ttf
Size 64KB
SHA256 5334290d256b59e8e5db3b659baf2296daeb7cc7785a9ceb10a72b80bba0e2e2
MD5 0626fd151c36ef92021a59a51c95eafe
SHA1 777d178b56e1d58727116b99a69109a698795457
SHA512 b2c74ed9f0a6bbd542af5379d3b5b440e4a9ed2ed7769943b6233f73dfa3e24732ea5fe515e96c59596ca842c9d391e69b8a703861ac7ed2f990e9948b88cb55
SSDEEP 768:pP0SryuMdt9WdqPgLiqZF9MliVe2ssqm7IWLnsoZuLq6:1ZyLiomdsr1
MD5 SHA1 SHA512 SSDEEP

Submit Download

RobloxEmoji.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/RobloxEmoji.ttf
Size 1KB
SHA256 3295bcc0f4c7a7c27fa24284adb60f20e412b6e880217213b75b858c8ff84928
MD5 d32a05d9b9bd421b205c8096a4643ed4
SHA1 fb7c0564e160248eec20f695ef3dbd384122ad5a
SHA512 421807e8ca500edbd3882742291b5c03c8c08c784f857b9731b742d97e19e623e0123eda06253c89952e67474e6d000bce68443435777cbddec9c25c0b01cb61
MD5 SHA1 SHA512

Submit Download

Roboto-Bold.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Roboto-Bold.ttf
Size 166KB
SHA256 c9cc991deb5d27f267830a19f2301eb164d9e61ec08669c1a1a291c5620ff40a
MD5 e07df86cef2e721115583d61d1fb68a6
SHA1 3dd713113ff2d79b94d2df343e2e28fa8e7279cf
SHA512 cd3638f857f16bb0745ce18077388be6a5f1762e7a310227e45971bb73cb4faff8edfa89ebe6c37f78c587c6ed0050337ad42348742bc46ac094fda16fd781dd
SSDEEP 3072:hBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09Pv4X4HXYXXXXXXazH9:qX6XiuMPT/eKL1mSTyXI
MD5 SHA1 SHA512 SSDEEP

Submit Download

Roboto-Italic.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Roboto-Italic.ttf
Size 169KB
SHA256 2c0958e0c7e9b63f36f672d3cccba14ca0d7ce2e3d6945b38e4ef3de35b79691
MD5 a720f17aa773e493a7ebf8b08459e66c
SHA1 dc6756127707ab2d6e388a6023087351fa41999c
SHA512 fcb01ae1e7d911106c79c588a230ace4bfc6b01c3cdf6784d9e26f5dd96ef4d1e6cf05c7a2fa89081bedd5faa0859c9f7b6a76797f95e076b400877d85285d05
SSDEEP 3072:f60bJiQTD/w00tEXlVT2puMWemTFrDf/7/xnb/cUg4vq97PilfZp0ak7z5muNOIj:fTB/aEBaJWr3b9/cUg4vq97PCxpAtWUX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Roboto-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Roboto-Regular.ttf
Size 167KB
SHA256 017c0be9aaa6d0359737e1fa762ad304c0e0107927faff5a6c1f415c7f5244ed
MD5 11eabca2251325cfc5589c9c6fb57b46
SHA1 096c9245b6a192d1403a82848e104a65f578a8ec
SHA512 e4b50f7eb7e96fe01ac44160f2ab88044fdcfc3e295f1c730f0a82de7149dcf902225a16c3c8e1d69e84bfb5ac00c98bd9d6b29db1a1e57f4e47ae842ac4a3cb
SSDEEP 3072:Uy2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI05Wz4OuNOIOU7og2FnI:SOmCeu+bqPVWkWUMxFnI
MD5 SHA1 SHA512 SSDEEP

Submit Download

RobotoCondensed-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/RobotoCondensed-Regular.ttf
Size 165KB
SHA256 f05ab6c1eade444bbf4e3e00710756e95c2a1d09a10425967149802219c0c0cb
MD5 52ee8b598488b1ffbaa93e50cbd6a2f4
SHA1 8e3b1c2ac207f652b67855020cf731cd600942f5
SHA512 b4476c6fb8c39bacd6024029738cab95f1df434a75119bd69284ef7b65fc1e8e0bcdb34d2e0c1ed73ac7ef78651e39d65576af1be529b63edcd52bd7e92b21e9
SSDEEP 3072:q4fUhaSQEjGUoixkzf8ESt41/3OXMsD431/kkTRCRjV8e5JeUyzquuNOIOU7og2i:qCPIG9D8ES9U2kF0WjyWUMxFnI
MD5 SHA1 SHA512 SSDEEP

Submit Download

RobotoMono-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/RobotoMono-Regular.ttf
Size 84KB
SHA256 a12917d2df0631d68bfb3217048dbfab217fc9421cdaa8154b86bea0fbd87376
MD5 e5ca8c0ac474df46fe45840707a0c483
SHA1 8b91c38b4beb70b8b39a1f7cb601fc1f426a9af8
SHA512 5f84be8ef643f9a8408bc83d1d9c2492976b97ee7c3d2eb0726f69dcd9d45ab15ddbaced33395c35183d3ed461c0edad73e9b33a8ee483b9e505f2c0f947efc3
SSDEEP 1536:rKBEj4ZjSJhjI5msm5Hh7toDdvtyQR4FmBOW6C20O:4SLjmHmLhohkQuFcOd
MD5 SHA1 SHA512 SSDEEP

Submit Download

RomanAntique.otf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/RomanAntique.otf
Size 261KB
SHA256 da2bd261404756482be61815520af4b254abc9109acde897ecc7cf4a09a05cf8
MD5 6492e4ac7f49e568f16481a6911b39cd
SHA1 07bfbc8a40f2b0ef508b084c715500c52324bcdf
SHA512 9f53958e652abe9e25dd1c10047d9589864707daaabe4e7f9eabfce71cd9f219c35201513fec8e2eb77ef058d0082c97d3fe679ac96dc0496e97e808817f700e
SSDEEP 6144:24WhS68vTg30SNSYgeok7eKbShe/mISlHmlkD7MxnYxc8Y6osSHBcSQpC87hhkPG:24teRXTKpkLoB2Ipkyh0bGoy+/N7mitw
MD5 SHA1 SHA512 SSDEEP

Submit Download

Sarpanch-Bold.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Sarpanch-Bold.ttf
Size 271KB
SHA256 900f9422ad3c57d6b00e111e99280b1c06f266706d26c34d7da6962f6140e7c2
MD5 8a7378ee6844a045b76fdd4950d5bf58
SHA1 c3fed7d807b0d299bde71a3203a2c94509a4a996
SHA512 6de019119a3b6ff1360130056bdb3c906c90d138fcaab1790981aae45f0ef87e77d2a9159b47f550d553fa60956bda5d83d2f3364a33c4548fc9d2d2b271a9f1
SSDEEP 6144:7b/mxGMnzRtVGlSaH3WYYYTGX3Z6c3CoPTGLtP1OumDTNjXknhV:v/mxGMnzRtVGM2TGX3Z6c3DPiLtP1Our
MD5 SHA1 SHA512 SSDEEP

Submit Download

Sarpanch-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Sarpanch-Regular.ttf
Size 269KB
SHA256 519f5e1fe88b617ff6c852dca332bd3e662eb23a4967f251e2449655dd3e7fb1
MD5 6c01ff4ea6ea91ca42e35aec519529ae
SHA1 7d38722f9287aaf508bee691223d8a3f93b4dbac
SHA512 a56f3e3a1b581eb70e88bf9b13e7b1f1831c5d1f09dbe8e9b7174b420766aa7c51780369cc0ae428e80b3b48c08a3d311129b11b4fc1e3194701ed967c2fe115
SSDEEP 6144:US+I7eBRrP+yVFnqaN22xZihcdL8960BqKCIrspoL+sqXOGrlskfbkRTN46hcCye:kBRp/Ho6AP1/FhdGXY
MD5 SHA1 SHA512 SSDEEP

Submit Download

SourceSansPro-Bold.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/SourceSansPro-Bold.ttf
Size 261KB
SHA256 9cbab47276fc04c65ac78098e9a2069c55e26f21701b29092734ce4e830f80fb
MD5 8669b8706bbbdd1482e2fccc4ed96850
SHA1 11238b0fab1c3d884aec3c8d8e04dfc4ce74ff91
SHA512 e72da072747f7c9880196757f624036e581d8760ccbffcf27716e8a11d2da11dd703d9e999fd74697627fc99b191c805f9b7feb891ecab467d565f7900a33cbc
SSDEEP 3072:GerYf82fMN6LSbLmEQgdM3x6Fu/93PRORHt/ooyZQHrM7DjJmhcV:GiYfuN6LPvqhF66RHt/ookQLwYhcV
MD5 SHA1 SHA512 SSDEEP

Submit Download

SourceSansPro-It.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/SourceSansPro-It.ttf
Size 92KB
SHA256 1b78bc1c8104348e13fcc043331926f818ce290556350b1a90a735fe038c73d4
MD5 3d7cb86547ce5075625915f2e86d0687
SHA1 e2c802b01d5437f3901773b2183c461efa49eaa4
SHA512 d2ff0d2bfe01d3a1dddf6c04f2cd3aa6b65c77eb7b0e9774aed3cd4b7096ed4ffff45e4373850348c0321d27361b2a95b63151f48d9e96baf29afa751302b3fc
SSDEEP 1536:RknOCowsSiyOKF6aUCPCJvil+MvEqELElU+HB6:RknIwsS5nF6aU2GilvMSHI
MD5 SHA1 SHA512 SSDEEP

Submit Download

SourceSansPro-Light.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/SourceSansPro-Light.ttf
Size 262KB
SHA256 3eb3ad852d98c139c78064804524d0d2472b3efb872dc176b217fb57ae6a6f78
MD5 81cd217e4a8160a930c6d5fb8d1e8e82
SHA1 6150358395ba0c580e04841a7a4635ba014dbbc1
SHA512 4c2abde3813a9ccd332cb84a4a91f7e1854b9efa641b60facf19b3fb21f08d67b8d32ec1f7aeb3ac704238e754477fbd9a135a46357e96a001954dcd89f7b044
SSDEEP 3072:4gie4yh11CJ6ManpFSU/EyQfpBDPRORxt/oo6rGpxJvE53hcV:r4yowF1/EyKp2Rxt/oo66pxu53hcV
MD5 SHA1 SHA512 SSDEEP

Submit Download

SourceSansPro-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/SourceSansPro-Regular.ttf
Size 262KB
SHA256 c9868de61ff2bab0b5a3a6d01c4b76f299459f08c6ae2f2c0383b4f9f6bedbf3
MD5 c1678b46f7dd3f50ceac94ed4e0ad01a
SHA1 fa4e303960cd8bf37a2171c4bc6186684f2d4178
SHA512 1b3ee35f20fd8245f9178a34a7c7754e30eac6f863ebf686116f87f41eabf39465fa09f576a5df2369808a3c3cc0a8ecd2da9cf01a29e67db9123c5cd2be61b8
SSDEEP 6144:Q7ojGvahXMjAtl3sRTt/ooor+iErBnhcV:QcltyACPnhq
MD5 SHA1 SHA512 SSDEEP

Submit Download

SourceSansPro-Semibold.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/SourceSansPro-Semibold.ttf
Size 261KB
SHA256 3ba5c382a7ee6a8831bdf90192addceabe6db4278a679e67fe7e9c0226b729cf
MD5 83476a890be79f84e97b792c9c40d743
SHA1 9e10e37c75e13f896382fb5ff0475edc454f4589
SHA512 fcf87cfefa1e700d47d59b05f9d427811a2104e0cf03ceecb7b0b52164540551725ca042dbfbfb65225c0792cef5ed5af76c6eb7af67fab4ef6cadd939a2c682
SSDEEP 6144:LptH9GTD/sNctyXZK9R0t/oo0/5fi+RpohcV:FtdGTttyXZK9LVpohq
MD5 SHA1 SHA512 SSDEEP

Submit Download

SpecialElite-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/SpecialElite-Regular.ttf
Size 147KB
SHA256 9398ee3a3796482b70bb1731ab9b581ed1b84127a3d7179ae6a6ce3487377ebc
MD5 7059acee3b9d8ea9744c26ab45135a8b
SHA1 e6e278b31a1ff8b82ef17a7e540d4d2d06d273ce
SHA512 41f86bcbed3d20508d6f964fd55d24bc729447c2363cbb0ee10046df8a3128644d304249f46650b6eee8e865101517a056fe6446a6812a5c0a9226c563004761
SSDEEP 1536:4romsh7t2qsxt/j7f7eFVprlGrh2nY20MsogKISRZTCIjM53CbEr7YNqe0d3eqAw:2XsBtM/reFrU18I2Z+v4Er7uqPn
MD5 SHA1 SHA512 SSDEEP

Submit Download

TitilliumWeb-Bold.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/TitilliumWeb-Bold.ttf
Size 52KB
SHA256 f31bee63db4c80388efaa1bbdb249962cdb20bf4a2b8e38f4f82e70d8d719c5e
MD5 08d37409a924ae95fff8df77747b0c42
SHA1 ac297303cc8329cbfa3c04a3f424d41982532ba5
SHA512 14fd4f517ca55ce506cd80395710b2d3ab5cd1c5c17119251abd1ccbce6a96900a024294992a997f39a2371b7e79e5716b872abead03cffd5dfd3f30d398068d
SSDEEP 1536:11DjDEtB/KtB0mTQYeSnJqaPfbeOoJM2g2xyCMR2E8H7O1j7KJbcHbAmR6exA:mWhCMR2E8H7O1j7KJg0mR6eu
MD5 SHA1 SHA512 SSDEEP

Submit Download

TitilliumWeb-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/TitilliumWeb-Regular.ttf
Size 56KB
SHA256 189cc1458ad1364bc49e46f5e41dc33165e2dd6d66f3df3be2f224934c413190
MD5 ed1d014bf2b8b72f27d6af65c69f710a
SHA1 3e2ead835511bff7fe5874e95880283b002b9eab
SHA512 6aa0193a7d855a683173d5bf28d87c5fd700700387b901be30e5c73c05c4286dcc38bd247ebd6d06c9037bb7972f52d6503fca983345cc807fbb03fefa822766
SSDEEP 1536:IVng+6jRs1SPDouz12E8H7O1j7GiYk5Jrft4AKw01e:Ig+64SPDDx2E8H7O1j7xP5JDt4AKw8e
MD5 SHA1 SHA512 SSDEEP

Submit Download

TwemojiMozilla.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/TwemojiMozilla.ttf
Size 1.3MB
SHA256 860b69e096e5805015cf5b5d64e4ece06c5b987dc05da1f97835c79d9cc79b10
MD5 84f66d1842d3187d6803242430d4f9f3
SHA1 4bf59e07298f03d90bbcd6257c9810c2c4d7b72e
SHA512 5524850540279ae84139e973dfb2e5e64f50a20e146ee16a735c2d43e36cae2f36bd96e8ed807362bf47f8b237c866e215f6b33ede35df1b1914714ec746fc3b
SSDEEP 24576:oUxU2vjzy6D6ZUrj+ti8C0eT/0TTXvBkrIvRKsUgWFg:+SHrEJsTvIAgWFg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Ubuntu-Italic.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Ubuntu-Italic.ttf
Size 318KB
SHA256 053426c27bd66cc911700c560ef7ba2ee8422d1e7b5cd967213b1feb726a6d89
MD5 4b96047e4af086277cdaeb9e60857534
SHA1 750d057ad6b1b77d9b92134b4c5a1869fe0f128d
SHA512 81dcf7a98777897526df32df620aae12e6d13c8779cb8f01cdba4d3ec43763efea427a56b72ac8cc65aca7f1013b7b40690be7726de97864bddc0d80ce4b9cda
SSDEEP 3072:5YI0clfHmrflMkH2NXGYsMGwVzcx/WOTZIKhL+eD1ayqve/M5fSjIJrKWBhLKYKY:5JNEJj4yMekFSjUlrLKYi4DwQjEeTfUe
MD5 SHA1 SHA512 SSDEEP

Submit Download

Ubuntu-Regular.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/Ubuntu-Regular.ttf
Size 291KB
SHA256 bac6461feb3488e5d330e7e9434fc8e0c513aa3c1e7b57598eab1654e1055a14
MD5 2505bfbd9bde14a7829cc8c242a0d25c
SHA1 31b6449384c3fe8d10a483814fe68302dc05485f
SHA512 cf6cfb1fb6966a44ff8daa34197929131cc9240ee70337095c8ab5e5973c2d9dbc9dba0a4d020145d721dfc11196d4e26664332e6f0b818570a7829c4076cf5c
SSDEEP 3072:p26gFIMrBM+UO2nUdo55QQgE4dhhv8tT+UgPZs1hf3NDsRkRvvewokbvs0w2E8Hi:pQqfOK5143ityUgPZCDmiHewVbvL9etL
MD5 SHA1 SHA512 SSDEEP

Submit Download

arial.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/arial.ttf
Size 693KB
SHA256 a3f7455af6ff0c8388f4cadb878b17e68251a7e5a92d0dfce17250d1c119a2f5
MD5 f1f4a0c56990d1b27034e64a5355a348
SHA1 f4b02e302f7a4846ee5b7e4026a353830e99f9f9
SHA512 45650b9b8215863bf9389bc124c44d6d2a29c76c728b938f99aab6cfa44a70433f7a3b680e60d2eed0979a92c3b58ba572286ec21a70538ab0b81b4b51f45c13
SSDEEP 12288:ESzhZc49ddKbRbEU4Sp5QtINjN+Rf8i4GNUvKZUh6vAHbMWA/2IolFB4VAppL:ES9ZJrdKUSTMZ8iRtZ/vAI7oVhppL
MD5 SHA1 SHA512 SSDEEP

Submit Download

arialbd.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/arialbd.ttf
Size 670KB
SHA256 8600929a3542d3cdc713a6174b68b909db38ed81c025744e0f2f6d5eaadca5a8
MD5 cac5fef519a408d2e226b5bbf2bc9720
SHA1 4ab131eda1aaf272e6136808fc9326991c8013e7
SHA512 f3b269a184fa8ace68cbe4584dc352667c14180f74d592b490d2a0b00cbedad8478f5a79b4da68af3303601a1b769cdebfcac0b0632a1b0d01820c460639a871
SSDEEP 12288:8GbQHp83GFR3Z2qdDf+FXZMaZy4NLaYH1gheTEFyJkusPLgBIW+xAiAA4Myrs:8GbrWbceCFXQmF1hrJkukDyI
MD5 SHA1 SHA512 SSDEEP

Submit Download

zekton_rg.ttf

Path /Applications/Roblox.app/Contents/Resources/content/fonts/zekton_rg.ttf
Size 84KB
SHA256 82904c6613e45c4e5a988d242ce183d10d78a4cc6868e74c618e0dcb773472fe
MD5 b080d88aa69a197c87d4dd471988f25e
SHA1 0292478a8c5732261f0f64ae255979999c1701d6
SHA512 792df090b5555ff51afa579456a6ba77134295ef300ad13bd35e329dc554c6b8c6487b9674c50fb8487af4abceb986940c4869fb08af56fd58a2f7e23db36c89
SSDEEP 1536:MR3lPAbnxVd3igv0iTjYhRBQssLZFNOpwiEs2E8H7O1j7NYGl:MR3CdTPoBeywLs2E8H7O1j7Fl
MD5 SHA1 SHA512 SSDEEP

Submit Download

InfoPlist.strings

Path /Applications/Roblox.app/Contents/Resources/en.lproj/InfoPlist.strings
Size 138B
SHA256 fa9d3e23d4cf58c0a9ce751cd5ae1198967f9cb650970530bf7453f50ebe292b
MD5 cd60d32f130db4b917d467f141082e08
SHA1 94510c0e93636ef5944b3730c110127f72e7f793
SHA512 000169594621b3424d20c4e51330acdd7cccfd8c04460ed97c196f161152c2f4ee9a195e9d73c625f554f76a0480ca4d0e6237797b95dcead86b609f1e0b028f
MD5 SHA1 SHA512

Submit Download

CodeResources

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/CodeResources
Size 1KB
SHA256 a8bacb1b46cc85f1469c69cf6627c401b63c515c350ebd79cdda6865727533ae
MD5 2918e164033d0771fc8f5994396bacd8
SHA1 4ec2ba0270bf788b5dfa187dc253918660888246
SHA512 b8916e0165410315b7d305537cc12753370105aec843c0068c6b65ee937e2b345ffad0f1f01c6fe0d3bcadd037965b007e8b08d1fc44411fe956864d0e9cdac8
MD5 SHA1 SHA512

Submit Download

ksadmin

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin
Size 4.3MB
SHA256 75a83607876198a4dc5fde7f13803e028b386c2efda5ff15bf209ff95e152ce3
MD5 66d78c6a3e0b37b2c116b1a6a4ae697c
SHA1 dfb1d24ab16accdd0a1300a399f176d36d54b38e
SHA512 78d51c475e52ef6ee3e07240ba694c51f899c3704c4265a3fd6ae24206218c83190ce4993472d34a234e53187f8e6c7304869914629dc2a9ba39c371b4797416
SSDEEP 49152:ACLbQi0Kum1/ejlx0UVL3klpE3lbBVZSp+sqtJo0pdo1KYmGB4wd5Rp+:9+JdBVZSp+sWJNpm1KYiwd5Rp+
MD5 SHA1 SHA512 SSDEEP

Submit Download

ksinstall

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksinstall
Size 2.7MB
SHA256 03d0ca0a48dd0e3e36285c0f7d1ce5bc1af8d859527a3ca1c854ef13b462a64c
MD5 51587d46ed18f820e5a925df969d8273
SHA1 1a5928268a3328642230d07563d5268b8db6fd96
SHA512 d54b5fdc5a8c437b9f362a181ec5c85e361686c14d87e3b4407bcc454dbdd980e6bee969b1aae3a89606f09cf10816916a5cea05ef618d66b94fb25b673ebc3a
SSDEEP 49152:7XBvtKEIdQp8VS8QUWmBUDpUD3yT1P+28+Dp:NVK/BUDp+3yT1g+Dp
MD5 SHA1 SHA512 SSDEEP

Submit Download

Info.plist

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/Info.plist
Size 1KB
SHA256 d649de3e7adc7c26c2144a109c5fff1a055f3063faaebb75ac9bb05a1ec81616
MD5 e46f9a1729b25b6eb0307ea2ad11624e
SHA1 c65491186ff8f472207025ef15b9aea5962c76a4
SHA512 97bfc0ecca8381aa3a604774f7965dc5f6e208ab0fecc63399f2d8ba895e03f1ac88a16a269262f959e75c1538a50f5abf3dea060756e0344143935b087093c6
MD5 SHA1 SHA512

Submit Download

GoogleSoftwareUpdate

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/MacOS/GoogleSoftwareUpdate
Size 408KB
SHA256 9ece515e7727cfae3e51449c9454292567e7b9bb32d62e407f4e8e8fec7629d1
MD5 2b8398dba56f234af4c4228835bbe86f
SHA1 c873ea26afe669cd0d109a64c148c858eb18c713
SHA512 62acf5d6dd9d5eb6e5be6dbba6411d9a2659ec99118db58a88a07af53747cc230027fdb608857fbe232343ef346558dd140e92f8f70da69e239eb1fbedc99791
SSDEEP 6144:b7H/u9v0K48z73foj6gM1ufdVme/XFsJC+9ZR8DjojndJzZ6dWTVriJQ2fnpzrBh:+9v0K484egM6meiZ33l6kFSrvBV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Info.plist

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/Info.plist
Size 1KB
SHA256 7bb7472bd36148b228b390eeadc169cfef9263875e7c2d14f716be913cd22909
MD5 44802a32230ecffbc1dfcffe92d25eba
SHA1 cdd290e6b31adaf0e027d64ff9bb4ca33fe96d9b
SHA512 8ec32d77030b645eecf8c80c79298ff36afc3bc9d326b639e7a1175a2ff67937826070393f2c92efc9688a0dcd1ef10e3603dfe725f6c070f55d083aae4f52db
MD5 SHA1 SHA512

Submit Download

GoogleSoftwareUpdateAgent

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
Size 4.3MB
SHA256 9bbc6132ba07dccb0e0565ed6ca7dea8f41aae8ce63399cf86f700dc0049bb5b
MD5 2ce77dd0b52220472c02afaceea66fbc
SHA1 924dcb8fb160c292b5b502424f8a2fed505271e5
SHA512 4d2dcd106f677b2266e2ca664932ea0eb0694bfc97479aecf2b3e64d483d9c1bd494566edb355b770ec466bbb70264d6ed8ecc003729349342bcb4da614a6073
SSDEEP 49152:X+5QscVvxh6P4Dvrso9LocyAOdVX73YDmX6GZvmw28HulGthlmYPn6G:FWARgrYDmX6G9Y8HulCh0YPn6G
MD5 SHA1 SHA512 SSDEEP

Submit Download

CodeResources

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/_CodeSignature/CodeResources
Size 2KB
SHA256 6686de10a28a2fe11b36cbb86dcbacc827cfc4ea116b4dabf1845e5aee629e9b
MD5 c48c1d9c6cf982c32580a9c58b0cce51
SHA1 630a08873072069616cdcc31f55e6d7423086d78
SHA512 27f6256579e03e319af66d7fa316935b4e2d5c126429a8b961424a466cab907ceab5d068fb87d763bc3d819a791492c17ab1d1b54f5530cb34224b582d00c013
MD5 SHA1 SHA512

Submit Download

CodeResources

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/_CodeSignature/CodeResources
Size 3KB
SHA256 e72cd8420385750b55daea0756e2cdb6ce6e968af856c905d4e1aa1ebae50b26
MD5 565e66825071ce6fd4c72b7a89f9d2ad
SHA1 f62d5297bd127625fa1f95006ca8b700d26b6b93
SHA512 3fe611c6210dbe7f3e59b72f21b6bc4e42164cb9b91a6036ede2c060d7f1c61aae249248a2ef22df8f55ddfbf06c8f64cf08aa5af855418e91768dd57d22e74a
MD5 SHA1 SHA512

Submit Download

launcher

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Helpers/launcher
Size 427KB
SHA256 f746e940ca1d6578ebb8a3d838b6de05b5693b3bb13c87bdeab809d660b8a1c3
MD5 29d28e512a164a2bdeb28ef48b2210fd
SHA1 2350622d2a83737856a752e6dff0c81ef29bc384
SHA512 d059d4b19b3a5b508e8d7d44622c0ada73b69b423603c6d38978dfb2cab33a25b1ccabb990fb2ef059acba8f101cbabcebbedc15ff94af3dc7355acf2a3204ed
SSDEEP 12288:H7enP0NP/ESejZcKrbFaOg06fVVrgV7dk:H7enP0NPUdrbFINVrgV7dk
MD5 SHA1 SHA512 SSDEEP

Submit Download

Info.plist

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/Info.plist
Size 1KB
SHA256 bd5b958dac0a276361c48ff6b889829f8a205f23eab0a3daa852b123db0e3748
MD5 43e69a8b060835d15c76beb272fd4980
SHA1 ded3c79bc32c01040153201460faab5aacf284f1
SHA512 e831c3b69ada4405bbab5a5551af529dc341fb2bf351abe2b264e4ce94b9044c6d233ef30e5a69267b5140442e8111ce77aba20f7f6a2accda270a6d025e58b3
MD5 SHA1 SHA512

Submit Download

GoogleUpdater

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
Size 8.9MB
SHA256 e50e41ab6f68109077073dfa7cdeccc4f81ac8935e78654530c83905f2baaade
MD5 545773fecc670ef3a774ca48c0f3253c
SHA1 c9db44c107c88008b0b5c9445b7b6289f4f487c0
SHA512 b3f7e639273c11322af9d33d295cf190624a0f8bdc54d64df95cb43d0a20eae88a6ef55ad67f340e96e333fbd803d0cebdc64c0a2bdb859c871c2ff37682bc4b
SSDEEP 98304:ra6usK35zbc/eulEmJ7DHQ/1H55vIeH+HoS2rRs+lgJfiCGRfvP7Z3MK1H:rVK3megEedyW+lgJfiCGRn
MD5 SHA1 SHA512 SSDEEP

Submit Download

CodeResources

Path /Library/Application Support/Google/GoogleUpdater/126.0.6462.0/GoogleUpdater.app/Contents/_CodeSignature/CodeResources
Size 2KB
SHA256 bf1ed21e4b827b35fbfd06a27f9b3a4d959969f74081d02111d6de97ace35616
MD5 842da6bdf4032ddb3d3a031dfd8531a0
SHA1 8a5c8bc15c157c36b7e619068fbd7679665d6fc9
SHA512 04e77579c92dedfaaa2777b087e909c1e3f0590ac6df3825292fc1c4e6193b144b762c78936de205b20db9a255102b14bee0e741db1724297d4fcee42b49f25c
MD5 SHA1 SHA512

Submit Download

Keystone.ticketstore

Path /Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
Size 1KB
SHA256 fc5e74285d9060afa97575b73336bbf7a7588ced2a85bb38a0b0a991612c23d0
MD5 0971e4051a0fc3d3ed9ff1e51408c5af
SHA1 03e56c7ccab1cb79628b3fae501a3d1e27dd28db
SHA512 37dacef53621a75505ecab05de2ec2af94cbbc353e41ffb5356fbdb198250ec9373826d8d3e2b537320cab4d6643211f928d83822528066879b1e2447c54098c
MD5 SHA1 SHA512

Submit Download

Keystone.ticketstore

Path /Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
Size 1KB
SHA256 8abe775fc3426b2326bd53115ca423451c256ffeeca995c761d41ef11e2e3e55
MD5 6c34ecb18647fe621caabc7e3aa34464
SHA1 ba70a5c003ec4b373b506024ac9d2a4c732e8eb2
SHA512 a65180911209def55525401bcb71e8c2314b2acdab72b761e9c38cbbe67a61434457cce45303ce87bb03fd92e57276d4f07d90d1c28bd3c9a37e9e6cc5bfaf05
MD5 SHA1 SHA512

Submit Download

InstalledPrinters.plist

Path /Library/Printers/InstalledPrinters.plist
Size 495B
SHA256 aec405d7619e28da751fafd97782015affebdb36e863c58eea2b658551a59e7b
MD5 3439dcb6d4ce19d3ea022b8bb17cba7a
SHA1 e412c16548b6fcc5fd488315cd70b324ca4d782e
SHA512 8ca944a1a157f6933a5efeea35aa7626d0dd5f6fd4b5d9fe08c3760b39b6f54289e502923ca7616110c468173f0389f2ce1e35899d171bd08873678759aba93b
MD5 SHA1 SHA512

Submit Download

com_apple_MobileAsset_TopLevelDomainDafsa.xml

Path /System/Library/AssetsV2/com_apple_MobileAsset_TopLevelDomainDafsa/com_apple_MobileAsset_TopLevelDomainDafsa.xml
Size 4KB
SHA256 ade7d945af5fb6d80a58d3d7a2a9b4ec652a34bf73a8854e2952f6796c70f6c5
MD5 521b165f7caa650644bc6abf982b82cb
SHA1 7631b2e548bdd187718e2fa4ec63c24b14d00021
SHA512 53c20d8f59a3839a04b0ca053a6dbdb07f127cff1ea96b9723272a184ad4050ef322fcd986ca7ad92297b5e9f5dc517f7fc2721591ccaa50e6359035fde52e4e
SSDEEP 48:cfyR/Jjnn6N14rcmn6IrcU7Ut0Hmvh2/FQURUvnp7sKLU6f3eF9tTG/2LXSn:Cy1Jjn6N166w7U+Hghy6pce3OI8XSn
MD5 SHA1 SHA512 SSDEEP

Submit Download

visual_model.tflite

Path /Users/run/Library/Application Support/Google/Chrome/ClientSidePhishing/29.0/visual_model.tflite
Size 3.0MB
SHA256 d38a4cda8912f9598b8701dac7d5ee90eff324ed1fb9d277b9784fe45a4e6c72
MD5 a9803d560544e4d1fe551b2c113c5370
SHA1 a998fdb1e80dbca61267db112812a7ee34b82dce
SHA512 65b8b6ecfea2aeae95a39581c39476a54721e07ee7c296650ccddea29a09b29a11cab15fdc89f97295bd61423dc13a66666faca371200bcb459dc1f25b6c89fd
SSDEEP 98304:0FkQ8+nTgV11233hz/v/U2P6tObWAOz+O2la+Ao:T+nMV112lU6b9O2rAo
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path /Users/run/Library/Application Support/Google/Chrome/Crashpad/settings.dat
Size 40B
SHA256 5cca682cfa80faa97838327d83ef5a2cc39e21b0cf16639aa7c4f095bf1be4e6
MD5 fcb4024c6dc53a5b72c492fd960762d7
SHA1 82c43024d9e274bf2b8a5d1e505d65cf3873fb92
SHA512 5373007f40ec378d18770218163ffc2870036bf8c0af1128194a60c6ed6d944f2e3833bf151fb5bf4aee9325c1fbab56bacf3f6437daaa59efb0afdc5c5eed8b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path /Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path /Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

craw_background.js

Path /Users/run/Library/Application Support/Google/Chrome/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.6_1/craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
MD5 SHA1 SHA512 SSDEEP

Submit Download

000003.log

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/000003.log
Size 1KB
SHA256 e749dd966dea01af232d1d5e8a5ab4e8b064a5073df8a4cab4e2219a661f62a0
MD5 8197c638a29ca7e65a82cae81f5217dc
SHA1 a9ebe6b669bc0cfd684b1beb02938e3f2e79688e
SHA512 1f380413d6e2537f76e9f25d5f5dfba223051363302a6f2bfcb36abcb8615909fd9c67b80566e22fa6e6839aa28fa07876ffff78fbe525aa670d724bb7c928fb
MD5 SHA1 SHA512

Submit Download

000005.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/000005.ldb
Size 1KB
SHA256 465b6fd15446b6e2af4236f62745b034c25528ab17b278c0f73ef987a3950d82
MD5 e06512fb7f465bbe8f91d23a3fcd4be0
SHA1 b7f529ae63ea7ad54232ef179918090a1076cdca
SHA512 e042903dbca574609a056be4fd8c29c6ac30fb467ebdb5110ba6d0745e1319f2e607b5510eab2274131b52458dfb7b978e4fe69ef70d58fb46d13bf80b089cda
MD5 SHA1 SHA512

Submit Download

000006.log

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/000006.log
Size 19B
SHA256 c9d82f431c31d1a5b967f620116c533d9b1fbd70ca2ed2db0287a49b88682851
MD5 efc901fb0facdca4b7b4983a3c4f3b22
SHA1 68ca1837e06186fb1c56f935acba481a0927c05e
SHA512 7f814fb483ffa80f4d9ebd7d6ae7821f9319c31b64af8182f925c72f45af732da9209da5b22eca7a6465e0d60e03b41e29730609379fc57f82e1065a47bd4e84
MD5 SHA1 SHA512

Submit Download

CURRENT

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

CURRENT

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

CURRENT

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/CURRENT
Size 16B
SHA256 8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
MD5 18e723571b00fb1694a3bad6c78e4054
SHA1 afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA512 43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2
MD5 SHA1 SHA512

Submit Download

CURRENT

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/CURRENT
Size 16B
SHA256 e91d13722e31f9b06c5df3582cad1ea5b73547ce3dc08b12ed461f095aad48ee
MD5 60e3f691077715586b918375dd23c6b0
SHA1 476d3eab15649c40c6aebfb6ac2366db50283d1b
SHA512 d1c146d27bbf19362d6571e2865bb472ce4fe43dc535305615d92d6a2366f98533747a8a70a578d1f00199f716a61ce39fac5cab9dd67e9c044bc49e7343130e
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

MANIFEST-000002

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/MANIFEST-000002
Size 32B
SHA256 67df20d82ca552a62141caded4f2a14d392789fd8b2b414248bd71f483001ac0
MD5 56ba1e42dd809a8930f99d6518616d0c
SHA1 78436e23f803d5d58034659293cc483091db6af8
SHA512 c659bc495ab004a1058856fb1ca3e09820b81d161431d79607c97aab33a64bb973605262885cd44e84890ab33c4819d823c9a91cdcaddf71080345cddf998b62
MD5 SHA1 SHA512

Submit Download

MANIFEST-000004

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/MANIFEST-000004
Size 82B
SHA256 c4da7d790ab067a2daa59143974d478d7adbf92895dd8562d5816b2c427b534f
MD5 856eaaeb72474013527d765337652834
SHA1 a96fd7cab808f7d57b6979455b2786283aca7e1d
SHA512 9afdaa37d7a754c388a9dc5f1029fe8c84ad4ab8f1fe01e0ce6bf3107bd323cae8248bca98b69d2d458c18ce13daf07177081ab948f3d4ec460468ccd39c49b2
MD5 SHA1 SHA512

Submit Download

MANIFEST-000007

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/MANIFEST-000007
Size 82B
SHA256 114ce21c903f708a4fc1d0cb42251603dbf4176a4136b956c50a02bb9297aa96
MD5 19189fab86ec82eb4f2b2109467f489a
SHA1 2c89222dd774457900a08c3b2ef3d5a54ae8e639
SHA512 1b8d8288788df725207a5499d0413d730e20e3fbc55d90dd036031ed1ffbcaf10b6160e0b483ae05483fb092a41258ee20341c83553c50b5f3efb3c604a61dab
MD5 SHA1 SHA512

Submit Download

MANIFEST-000010

Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_www.roblox.com_0.indexeddb.leveldb/MANIFEST-000010
Size 82B
SHA256 497681476126c4da9c219a84fa2e92e42f31d783e7124928619dc49eab408377
MD5 14e82886f2d17ae3b103b665515799f4
SHA1 c6d841434a7eba39510cae3a3706720bf2718976
SHA512 6f4d5913cc904af6d677fc3164ebf61879658a19a67888503cd0ccb13d6ad32540b50209d4d54f3c58f55f0f636ecdc5a315e3ff9018c6d0bf594457d9be86dc
MD5 SHA1 SHA512

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/Local Storage/leveldb/000003.ldb
Size 339B
SHA256 9cc80c0d1dfe7205c6530402c3240171966e72b6df8ef0e8571660fb18652cd5
MD5 61a867b6e4a24cfcfd32ddef25ac3229
SHA1 87cc4516fbce1700174d8ea27c9d2cb70a60a1fd
SHA512 3678cc5f913c7f6c179be8d8483240a1c9aabbe5b295d6aa2b8037c60a8f2aa473f1fb56a7ee7093aaa8c24b968d32fed99972f6f837868f86b53b45de13f4dc
MD5 SHA1 SHA512

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/Session Storage/000003.ldb
Size 569B
SHA256 b7600cfe0aa091e9ab8540869b7ea120a62b36240acc0370c3fd62655b58bf4e
MD5 b5db1f091948de93d7fc96e14aef6da3
SHA1 74745f991e3dfe45037366e55c2e6df47d8e6593
SHA512 d116ffaa01fa29545758fbe273c10d57879a91983d6b5a86ed410a0ac79cc8370fd2552284afa56f363a75ba6a89cc5c9a33f99071012dba2f2f8298ad0cac34
MD5 SHA1 SHA512

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/000003.ldb
Size 269B
SHA256 241a349a63252a8026016a5ef0d713fc18f76735dd0c10963f9a693bfdb9b172
MD5 6487e04972ecffd0aabf7b61bdda8119
SHA1 26f0b11a2529a35f6970a914deadfcf2e2d23286
SHA512 44db500fa4549808a5ed1db5516fe4d412cc4e3898d102399fa6f467a2ed3fa79f133a0afcc5e1ab91f480267027ea11e48e37247d24513542286310ab2d47ae
MD5 SHA1 SHA512

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/Storage/ext/gfdkimpbcpahaombhbimeihdjnejgicl/def/Session Storage/000003.ldb
Size 141B
SHA256 085c44dfa11e65ac3548c4d0fe1ae641570f90c7caaa2881c3990efcf555e6a8
MD5 38fc535a8f11d7e955ef58cc63158eff
SHA1 c45ad3ee106dbfb65dce7c09b53140f34454cd0e
SHA512 26e70000f77c1b6388dd470f9d7ec6bedc4fc3c43e48efcc853812eb076108bcdd9f50f7a89265e431d33df96e71755ca242dfd0aac16a51d99dea50a5a1e505
MD5 SHA1 SHA512

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/000003.ldb
Size 136B
SHA256 935d36c021d0e08a5648c622f3f6fde376e3310013680ae598c0e22dc943d132
MD5 fe382e791274914bee5950777e4f1fd3
SHA1 53b523b5fc87e66f2520a0b5f9ea080072668f4d
SHA512 a5f608fb4f0a1dbc4c5d1b739b1a5b6f50cac1d6a61312b19abf9f601882a291d73524ac55bbe183e4e64db8dcc203d4bf3cedc734fd04bd448cb825d98d1e67
MD5 SHA1 SHA512

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/000003.ldb
Size 2KB
SHA256 18b5270537241fdd8a8de2f4435bb9a19acc82d565bf629678c07360e0fa89d8
MD5 e0f65ad85a40a32fa91e551005e193ce
SHA1 a145766d5df23ae5fcd23dbb6937606f280f3502
SHA512 bfcf2075ba3d99c6bf4840d6c7754668ac65e7b88aced5c727f99de68940783424b6e9755b4d90c28f489f87d88eda0f2b5194c292c7bcd0cebcb6a66adb2425
MD5 SHA1 SHA512

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000003.ldb
Size 288B
SHA256 79b1150f1008ed3fbde59417e9727bce33a34ee2ac5b407eec1a82beabdd2c06
MD5 b47a44bdd1b765b6af56b347447fd1b7
SHA1 8599a1870656af91e432bb35e3497863e34ddfbb
SHA512 bfa1d967125878a40068e4d5ec4a4bed4f211373ef2ca839a51cb9a29d2da5afcc65755134af2ae732dc03391a636fbb222b4ae481315e4213ceb8d74797c9f0
MD5 SHA1 SHA512

Submit Download

model.tflite

Path /Users/run/Library/Application Support/Google/Chrome/OptimizationGuidePredictionModels/f9146ac8-f942-4a8a-a268-efb54fc098e2/model.tflite
Size 382KB
SHA256 a0956386dc64fd9f4883c8741f950cd60a56859616b159c9e4251c9eb0ac5534
MD5 6d7c2f9e94664539dec99b3233301b01
SHA1 85812b004742cc1c211c92911131ce270f8ba769
SHA512 4d06917f30651c3bf13c509aae79793b3f1ec93de12179464b18fd9fd16c7bf466884b1c70e425d7e937adde341cf24bd08f19a132bbb9683e804f29b4ed0c33
SSDEEP 6144:4i8mNiZGi+jiwubrNEOB37+rNiyykvXpqQC7SaPGNFzq/RnfAmn+qGk07U0z9zMl:WqEGi+GwGrNv9+r8bkvXpqQMLuNy5YmJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Ruleset Data

Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.32.0/Ruleset Data
Size 138KB
SHA256 fed1557c8b4e40813114db3b546c043105892dd0895c4d7c02d45a8be351173a
MD5 132df2b999906be7b21cc21bc247b068
SHA1 0665be201a96e717410a4e61a263bb879b3f08d4
SHA512 6764c8a425cd010a67a4636f812d43e63bb0815943e9839cf9fa35f3e5f9ba52309ed842306dcffe32a72e7019cb0c28e1d402dfc22dca0603a0cd48d6a26451
SSDEEP 3072:nAwq4WU8BNptWsfvaWSzpjNSIy27mElP6vUGyA:nAw2fcFty27Js1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Ruleset Data

Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.49.1/Ruleset Data
Size 120KB
SHA256 e634e3cfdd0d27d0be1f5f9a19748d19d564928765db343503f42a6e1f5dd4ea
MD5 c5e30274fe7b93847f6d7c02410d1209
SHA1 488a49f38459f29e110c706c51b61ca1ae3b0e26
SHA512 bc235bb3af269e9a828e6788dbae2b42cabc879b858102f4cc76c0fa02af0e296d20ffc8f134c0a3f9b408643e4810e8c46afeb0c285b892908b06ea1aa1b811
SSDEEP 3072:CGwvJvRPrNbVblFHKElwRtC8UX3epQ+ktrKaI04FrqPtZ4I4:UFNbntHm+Iuo/
MD5 SHA1 SHA512 SSDEEP

Submit Download

Filtering Rules

Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Unindexed Rules/9.49.1/Filtering Rules
Size 68KB
SHA256 ae2fd01d2908591e0f39343a5b4a78baa8e7d6cac9d78ba79c502fe0a15ce3ee
MD5 6274a7426421914c19502cbe0fe28ca0
SHA1 e4d1c702ca1b5497a3abcdd9495a5d0758f19ffc
SHA512 bf1287f502013308cdd906f6e42998c422ef1e272b348e66122dc4a4e471d01333b418f48d1bb2198c72845bdc950612597e179e612aaa1ba6cf8d48fb8f0cf5
SSDEEP 1536:5tl3vXzj/oGmZSxdCqbP5PfgJgCR4Kdst6zf2Lu4semcjS:Vvjj/VmZsdCEBwgC2ist6zf4u4TmcjS
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.apple.nsservicescache.plist

Path /Users/run/Library/Caches/com.apple.nsservicescache.plist
Size 12KB
SHA256 0966f32d3820f21110c7391ed05bb14573157b76be7edf273332eb233a52711a
MD5 6552ea59945884c2fb539e38b857e5d3
SHA1 e1d9dbfcca4da28b29e834959b9d8de36a2e01f6
SHA512 8c03a4f9bee54ff07d6af493e604677ab0ce970e13c0dc320e0db269e0460eeb8ed4488a424cb8b09e8841d588a2a2406f64fd81d7718dd840be75fbae172f11
SSDEEP 192:yH1/ImUGUd8ibwTA3+AMwmDTQYkCJaL6mLpnWaipSedwXnUfHbI0/oohxENbyhYk:01IXYA3PO8VuEeSXUfbaoPENbXSrHf
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path /Users/run/Library/Google/GoogleSoftwareUpdate/Crashes/settings.dat
Size 40B
SHA256 3c3b1523ecf2d67b99ab0d14ab60ff783c4a5fafa5cd8b9facba8ad7356a4a21
MD5 a30a3013aaafaa0d534dd31655d3c741
SHA1 5afd87ea28558f6970f1c17d5305f640ec649b06
SHA512 412b333c4a24672dd6592e3d6005cf522ca256e6406daca8e87c56b9e000c393ba5b022354dc78c1230fff9238f4a6b13a678b94d143bd75724ffc346df0dd62
MD5 SHA1 SHA512

Submit Download

settings.dat

Path /Users/run/Library/Logs/Roblox/crashes/settings.dat
Size 40B
SHA256 9140c43ea1ee474f1a9e6839b47da952164b56547e78dcd2865d9ea73f48e822
MD5 251dc3dcd9c8a658e3c54eb189cfaac9
SHA1 e97819bc3354baa73b8bcff67d492924d017d299
SHA512 cac43cb53ebfec42d4ce62de6d60bcebdcc98c938e820ae8dbff7d740017c6ed905d7b54a824626679db6f37286c208b1a0c86b6a00cbfa5db163e44930d5790
MD5 SHA1 SHA512

Submit Download

settings.dat

Path /Users/run/Library/Logs/Roblox/crashes/settings.dat
Size 40B
SHA256 790d6e957dcfc32a49fbf83303d3f4c9ff7a500d34e13ac8fb3e43a05cb4571c
MD5 a31b977b855fb081864067cb62b31593
SHA1 9524e27142f2718b8cf73ec0ee414809159dd123
SHA512 a3ba587cddffb2ef7e5bf054b945c60e1ab338b1ef279360c9bb70c2316af7450645e89bff4a532b4e2358394189f73a3ffb97804ad325f1ec448d6954a3f61f
MD5 SHA1 SHA512

Submit Download

fsck_hfs.log

Path /Users/run/Library/Logs/fsck_hfs.log
Size 2KB
SHA256 97be03bd8eadd8c8deb0d6f335ffb4e39f09e16d256388f819d1d32d55623751
MD5 1b57713a03504aa8693fc3dab385f969
SHA1 48c1a4a8a3b22ef4931ce61230ddceeca376c3f7
SHA512 b63838c1b0240bed6b05f04a5b58794b191fe02f9f67c379113e68752ede279a4371121206c4ce472b6fd2ecf4ac7c8615cec1f5ba53ad9e3c309c3a8143bb07
MD5 SHA1 SHA512

Submit Download

persona.kb

Path /private/var/db//keybags/persona.kb
Size 3KB
SHA256 23e98fb1d104d42d1ebd781fcd5e258da599c2bf8e70ad540736dbc0fae8413e
MD5 58397f2974cc9016f8c3c2d5a0016b15
SHA1 968a9618ec4e51b1bc360757680565b8c09063f1
SHA512 badd47699488b8d31694f9865f8ebc77a4601806d837e67a67e732c33b32347c819bca6376570a4c0d92a3135698c351f14f9e38344c665071aca20823a9e9ed
MD5 SHA1 SHA512

Submit Download

tailspin-trace.2024-05-12_02-08-02.tailspin

Path /private/var/db/spindump/tailspin-trace.2024-05-12_02-08-02.tailspin
Size 15.8MB
SHA256 0392f8d96d8dd79116efaeb08b8240dc4f537cdfa2fc6d09de4be05ae866d508
MD5 2486a03dfa354c627defb480d4f6044e
SHA1 7eacf090bc0c47f91bf752a8214f0b1ded059a6d
SHA512 983fa0abcba39c45e095092ef51ab8d7774a3b8cf367880ed2b4e3860d4170ff321e59350d2260c651fabb710dd89552c5da3a3d459f905f58ee293ab358cb2c
SSDEEP 393216:IXmtGTfVIjho/xlHTX6t4RJNiqTH/w4VAP:LUHRyqTHI4VAP
MD5 SHA1 SHA512 SSDEEP

Submit Download

tailspin-trace.2024-05-12_02-17-24.tailspin

Path /private/var/db/spindump/tailspin-trace.2024-05-12_02-17-24.tailspin
Size 17.4MB
SHA256 85e3e9e397669920471a80874a4603e7a2b3296a9debf8cdc2579102f2c69edc
MD5 eae6283f9cce6b257fae4d79ae6f1dda
SHA1 ddf90a34a4a4c6eb43462afec8f8500170be4489
SHA512 51606092c44f5212c7e7285dbd70db0625de8c8ae00829c1c7b0ac19f544f34abec08e4c656df8aadf085653880395b663bcc8289eb64f091badd78a297e5622
SSDEEP 196608:/MYnh/odGImcSUEP781IFA4KDmX2ealumEZ8B/0ECVMfKWe+dAb:/MYBoRl1INX2eHmAq0LMyp+K
MD5 SHA1 SHA512 SSDEEP

Submit Download

icon_128.png

Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dirjfsOzx/CRX_INSTALL/images/icon_128.png
Size 3KB
SHA256 4f17efbd974a41d88cb36567aab6bf4586579e78780f00b1826676819e14bff4
MD5 30899b6c4e4a757b8ec6dd2208acdfb4
SHA1 f2c5880a724c6d75cce1b5191e0d82c3bc7de768
SHA512 58539e3f0ad7fef30792efcdbbd955599e11e4261c9946e7c3dff6267e01747354ea3b901c46fc8329f81c68afbeb2d05fe3fcb266bc5948de8befa5b8d040ee
MD5 SHA1 SHA512

Submit Download

icon_16.png

Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dirjfsOzx/CRX_INSTALL/images/icon_16.png
Size 531B
SHA256 0a4bd08db6422f8e7a8a218ef39c1b99a5a675f12697f26be88f9afc2e1f9378
MD5 344554d96e418120bd80ef5de5194697
SHA1 23e141c3a6ce368acc1c299f062ab85914bcb17e
SHA512 7ae38853e5acca479d7fd81d48bb88c671cf4dce63342209bcff045ac581a04b7b0ed48f6c58253db950935c0522caaa4fbc6cf5a25151a8960ba56fc804569e
MD5 SHA1 SHA512

Submit Download

download

Path /tmp/KSOutOfProcessFetcher.UYpBihCCCr/download
Size 1KB
SHA256 18d80b6ecd78c4aff93819f9a66db252357708a9ba853ae69f8b78ce8fee3b09
MD5 b47fd6cf20c06e72c45bd4046adae194
SHA1 3a16e36192bb0cdc4edc6de880a9f9184822db92
SHA512 f4707b1a0b7f2ce664618e99e078ab5de09eb4e4f10523f7174cfdf0c874b67f959a837c8bb08bb25e2dc2be8d6e24fcfa22ba137400a9672e83d8c0a309efb5
MD5 SHA1 SHA512

Submit Download

altitude-1281.xml

Path /var/db/locationd/Library/Caches/GeoServices/Resources/altitude-1281.xml
Size 175KB
SHA256 49ee8902d335eaa69e7a62b890f8f49d776187965315cc8a628b2530e50418ff
MD5 4b83b8564ef37e681421517132a79483
SHA1 c53490db81ccdf4012fc0a184cb6bed56d2fde3c
SHA512 107ec81b0d99c3c02836bce271a16fe3cb86da2fc191090da10de548b9ec0b6731eb4c4d293a62810acd5f9e9ffc4511278d187aff26cc2c21ae338aefb5ca67
SSDEEP 768:SGSaD5wrMhcaOqBhyzi6+tLr2QCDtKuvJSgryvYZW/VEhxtKwxml+BMqjWDSr/gG:SGSsSIhyDoVuSReHMOjGkmNB4hWO5
MD5 SHA1 SHA512 SSDEEP

Submit Download

dafsaData.bin

Path /var/db/nsurlstoraged/dafsaData.bin
Size 53KB
SHA256 3fa3a11ba183442ad6d6f0736d9a885c929157a52055867c8548ee4412dcaf02
MD5 7e6f706958b092cc383164b72f0747d3
SHA1 0b5610fe3452fcd8b30c39512b182ed2ea658d08
SHA512 b9900d308bb49a051cf1a03134be994e387dc1707a45d81c8972dd05b6b3acb95f06120877f3ad3ee5f468200bbd1974ef82b170b32b51a36a8f892e849332ea
SSDEEP 1536:MOSQQYvSpsHfp5sNi0v3CXRdXPZIu2QmasB:7JQ+SpaB5sI6CXDsB
MD5 SHA1 SHA512 SSDEEP

Submit Download

UUIDToBinaryLocations

Path /var/db/spindump/UUIDToBinaryLocations
Size 84KB
SHA256 58ee10d4540d1097c833626d5209eea80d62b82a184d9d19ca7be31a7d01b797
MD5 14ff7918b23dc8529c35c5f86b2e3c87
SHA1 6258ac0cd0180df6f807dcdf4b8d004a430839b4
SHA512 789c59cffc8d1151e2795df38900c837254720b0fa91f83c8167623707a803205a0516abdd4322eda751dd079e63f134c00bd248f62b8f0cdd719ef05f252116
SSDEEP 768:8rixDUbswEFZ/n40bxfGV5U2bHQbVqVCojs/tREeavISX95ngVuXC+RrIUVLVHTD:0ix4EFZ/FbxfGV+bV0BmK+V3gIU/HTDn
MD5 SHA1 SHA512 SSDEEP

Submit Download

UUIDToBinaryLocations

Path /var/db/spindump/UUIDToBinaryLocations
Size 84KB
SHA256 a80b8fd616305ddc07f55b21e3a2789e3b9c172e9faa27d81457b4a868fd5d24
MD5 0e35890ce2de020b110313a28f99dc6b
SHA1 f81a05524ef38217103f68b33d52444c9f087bde
SHA512 c7de52bb517bab764844fe66ce56e0892b614c476f67e8e2a3148ad9f9dd8cad6fd959902547106c440e5f9db128d89c86cf70bb7cf2d8b6b9326c6c517cb190
SSDEEP 768:8rixDUbswEFZ/n40bxfGV5U2bHQbVqVCojs/tREeadISX95ngVuXC+RrIUVLVHTD:0ix4EFZ/FbxfGV+bV0BmKYV3gIU/HTDn
MD5 SHA1 SHA512 SSDEEP

Submit Download

mdsDirectory.db

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db
Size 47KB
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20
SSDEEP 384:xSMdGleGkIG7FF3theSMVXBD0tgcNrGB5pBfbouR6/chQOnGqwc2U+v+h/:8MdGleOhpBouRwchQOnGqwc2U+v+h/
MD5 SHA1 SHA512 SSDEEP

Submit Download

mdsObject.db

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db
Size 4KB
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818
SSDEEP 24:mFkXs98w/mBr53CEb9ujBbCYoVeA7uBEUMy733Ka2VCneWHrUZRJkWnJI4FNMOQS:m6Xsh+CLjL3Pe3T5FFEfEn8xiYuuSsS
MD5 SHA1 SHA512 SSDEEP

Submit Download

imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.1nZdv6/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3
Size 2.4MB
SHA256 9738a550f51cdfb80146b1620b40a37d58c5136254ee1f0f03c20a864fab89d2
MD5 0fa505d26fd906c645e60aa05f12af36
SHA1 ecb1def63dba6d475dcd61c4d3a6938855e6f24a
SHA512 6c49784a21465a2b7348720003f072a279a7aaeb88783b98cdb968a54cb1ce6771122a6f1bbbfb8dd36507576c81d6caa000166f2dc0f81a3feca4e8d5131a00
SSDEEP 49152:7GGdTzNOf9v87G2whzy8x3ZOOK4G7tbbOWVc2JjrqnE1rmoGfi:qGVzGBolTA3ZOOK4Wtb6WpYnE1tGa
MD5 SHA1 SHA512 SSDEEP

Submit Download

ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.10.19.1145_all_ac7cecrzrmfngskhgmtk6zmhfjoa.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.AD8l70/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.10.19.1145_all_ac7cecrzrmfngskhgmtk6zmhfjoa.crx3
Size 10KB
SHA256 e3a7322843834a5270a01c56533a34a24b1a253e3bda6f14046e10d818446165
MD5 cb79d407a4d6d8526b42060b9210b5c2
SHA1 331e3d66e82e130042897faf86dcbd05d7b227f1
SHA512 0ea283f2077ff874e1f2518565497864b11fd8a65f03d65e2b2996048bdba19849fcab81d9a8220cd51d4a09741b9cf222b1393f6ea4fde6db76dfe0590efdf9
SSDEEP 192:Hkgz/5MwS0wqF1GCEomF17IchyrIqVGqKI4eHiTSj:EIS01komF1FmIqQg4eHES
MD5 SHA1 SHA512 SSDEEP

Submit Download

laoigpblnllgcgjnjnllmfolckpjlhki_1.0.7.1652906823_all_jtggsagwbg7dhs53nvq4e53lva.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.B3758z/laoigpblnllgcgjnjnllmfolckpjlhki_1.0.7.1652906823_all_jtggsagwbg7dhs53nvq4e53lva.crx3
Size 10KB
SHA256 29661be65c8fb50d3d4df2fe040a1cc6dd525f50a95850aae6a191301c3de744
MD5 91e1255f92fc76b16509bbd174a992b5
SHA1 44cbc6b7b60470149850d375f2e2ae95cf1c012b
SHA512 ac1588c003c345aaf9a7c4b5f2d338fdaba041dacd65db567ff8cc588b47e372863e44a4a87f611c1530fb42fdb1388814d3caccf8bb3498c7efe78fc321d9cf
SSDEEP 192:5+MuySHjmrC/gPpydwiM+7xQn3XhULwKaIG911ztB+62jx1z2TsvQsDZ:huy6mygEdR5xuX+wl11b+66Lzlvxd
MD5 SHA1 SHA512 SSDEEP

Submit Download

efniojlnjndmcbiieegkicadnoecjjef_950_all_ozcfhczuc2yoavml6tc7ih3rka.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.CJVv9c/efniojlnjndmcbiieegkicadnoecjjef_950_all_ozcfhczuc2yoavml6tc7ih3rka.crx3
Size 150KB
SHA256 d83d000bbae784acceea698f86c18287f9573e62b6756297d0bd4cdc0207c4eb
MD5 5b7d61fa05001c3243a8a6d6618791b3
SHA1 23c26e62bbe0487840d91a60854ffc99d2c0f48b
SHA512 8b3a334f75a539243f8a0a98b4bd830bd966160b6710057e86856a1350d6c147322b4ef31cb6a3b6695aa88946be73ee9464430e5562a8bb485773f8478bd8df
SSDEEP 3072:L/32jH4cT4fYTDPHiTV4CD//Hv0/nQaOY10IFCfZZZmUb5EAiJj21uxv:j32c3YfH+FMQaOY+tZZZrSJky
MD5 SHA1 SHA512 SSDEEP

Submit Download

lmelglejhemejginpboagddgdfbepgmp_446_all_ZZ_mhw6ymh4ime4hiuauibc4z2ory.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.DAN4Ou/lmelglejhemejginpboagddgdfbepgmp_446_all_ZZ_mhw6ymh4ime4hiuauibc4z2ory.crx3
Size 46KB
SHA256 8bd6caa47fcc9572aec93c8cb10671c235e44b135a5f289c2fe4dbc870ce9716
MD5 86e0197cc608b9e6b1eb951aa171a8d1
SHA1 4b3cec3e4e9f4133122eceacc0f5ae80eafaf944
SHA512 c13a6c7c51d32993bd09e98241d09fea18b64ce6fb7fafe58116a3a47276a3a6212216306d1c76828b292765fc3215e24db68e379ca0894ffb8e3220bb9da0cd
SSDEEP 768:yCz7UkCpxJgFQf5i2w4z/jaU+1CfJP+UUlV1RZGEXKKUD5b2xs4TxcT6Y:yCz7IpxJgFQf5Pz/jaU+cMRZGoWdisge
MD5 SHA1 SHA512 SSDEEP

Submit Download

gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.49.1_all_ixzyrcu7pvmgu5pjv6enfqq6wa.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.E0rDo5/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.49.1_all_ixzyrcu7pvmgu5pjv6enfqq6wa.crx3
Size 34KB
SHA256 cd1978742a4afdbaaa15bf712d5c90bef4144caa99024df98f6a9ad58043ae85
MD5 2db7e78c310ca8e73c069a604eac4d99
SHA1 a6d1e03514f8eba03ab81f1380fc54aaded823b6
SHA512 681eaddbf304f4513b008b98493272b44815460568876b93528851ff7806775de38e6ec588fe27a2cf3dc804415e83a420e45d754b25ad4bdf68ef2c78403aa3
SSDEEP 768:Zb8Oi1BjTqoAR4UunhOYna6rG5BbBU5/qMz/PLcmeW:l8vBv44vnhOYnaOGr1U8eLMW
MD5 SHA1 SHA512 SSDEEP

Submit Download

obedbbhbpmojnkanicioggnmelmoomoc_20240404.625479014.14_all_ENGB500000_incvymraubxlb6ke6cnqmodupm.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.GscSM9/obedbbhbpmojnkanicioggnmelmoomoc_20240404.625479014.14_all_ENGB500000_incvymraubxlb6ke6cnqmodupm.crx3
Size 5.1MB
SHA256 f0682b4237a8e14c53c5d54f83d1e49697793125ad1f1f6955bb3e8cd750d8c4
MD5 e2c281ae14ad2d32ce83029ba21887c9
SHA1 8bf02cf7f5b19f8412ee2d736cb8db733941899c
SHA512 ac8eca3f3170495ff572fa1f410faca483275f97d1914bdda190b044eb78fcdc43609888d756f70c628f6f2e74aaefddc6d0d548b9bfa40890700f31443be883
SSDEEP 98304:h5Yflz9tyWi+RSOu8CG8mG2yj5By9bO8AmhRwa5DaXF5oXXWpWlx9xrAiQlAfwg+:hilhtb4JG8mOj5BERNDoF4XyWlxDrch5
MD5 SHA1 SHA512 SSDEEP

Submit Download

gonpemdgkjcecdgbnaabipppbmgfggbe_2024.05.01.00_all_dsnq62bcakl2jsbcore74clmlq.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.LPHAuQ/gonpemdgkjcecdgbnaabipppbmgfggbe_2024.05.01.00_all_dsnq62bcakl2jsbcore74clmlq.crx3
Size 6KB
SHA256 97c5f0830ae68cc24d4fd1031749d061894ab4f3256f504ff066b36ce86a6a76
MD5 67b899631c6a49bee779696081328f43
SHA1 f0fd610d080b97ae94b5be27da894be555a0f522
SHA512 efd9e8f151b8e06408e7f09cdcab509b0b8410104afd6550c2850468ef12938454f61af36a409b398087dcf968758a8d25001c50523156d5c07b50866438f9be
SSDEEP 192:5ypyTIGygO48FmYhdP6WadNi0+/7TofF1sB66tHj:/Tr98FmYhdP6WK+DTof4fD
MD5 SHA1 SHA512 SSDEEP

Submit Download

ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.O02hwi/ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3
Size 857KB
SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
MD5 a40c655b337e082c76b6ab04042b7ae0
SHA1 3cc2a2b7178a29fd2d246cbc532684d6ae45bea8
SHA512 fb4d54b573eb2275d8a3580fff138ecd7bded27ec58086b909b12c03c8005e35105c354a4a1ff76ada608ee8bbabeaafe208bb9e557661bb74e4ca39ee5eee56
SSDEEP 24576:tN1HYqiefjuhBCLF9t3c7y04bfB8w2aQnVBg1jAQpdnBXAt5:tN1HYqi2z9c7y04rKSpdtzw
MD5 SHA1 SHA512 SSDEEP

Submit Download

npdjjkjlcidkjlamlmmdelcjbcpdjocm_1.3.19.240_mac_adygwryqqyfdwvvjh32xxi6rilea.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.X2kjOZ/npdjjkjlcidkjlamlmmdelcjbcpdjocm_1.3.19.240_mac_adygwryqqyfdwvvjh32xxi6rilea.crx3
Size 3.3MB
SHA256 b158d145928f6c80d855f1fcc5b6813e73b7e14327d65fa9abb26c438e56bf29
MD5 91a8d56c19e60520cf00b78a506b87f0
SHA1 a794be44a680983ac0f87b1faedf064a65016623
SHA512 efe8b3be1ff7c30596230e091a5109b1328b3f603a4f3cad134ad99cf648b8b3a0dbdd79413f854a53dae4e1316862c6b6798660dd9f37283a97115905c65d06
SSDEEP 49152:bsKS4PbR0Ac/nUlmSoYKOpBAPxfS5DBmUn0w6GkY20maGWu311nTrsYz:bQq0AoSmSoYPAJkcUFd20maGW211Trzz
MD5 SHA1 SHA512 SSDEEP

Submit Download

jflookgnkcckhobaglndicnbbgbonegd_3028_all_adtsy74lce7u5mtzcrq4jm4azpia.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.aFnq9k/jflookgnkcckhobaglndicnbbgbonegd_3028_all_adtsy74lce7u5mtzcrq4jm4azpia.crx3
Size 70KB
SHA256 a924d1d2fd7fa87c509ddc39c5837d34b589ac76d07abb7736ae7f854fc9d937
MD5 6313717fa51a6e4784e2a032c1992f51
SHA1 0bf3f23d942f3105ca9ffea3646da83efa2d82a7
SHA512 7e248b2e95c6edbdff85953a183a0b645850089be5b407855342e3167b9ac81faa11b9958c76dc48fc10a52079d5161df5e04da7b91fb5a607ebeb2b8f77e5a9
SSDEEP 768:yAqr3VyiaUs4hheqeIVATCAKPhAmBA/Xg+7TXfQ8WDwmLW2o7ZkwTcmkAsW37jol:+Y4LfVAeAKrA77fQ8R00WwwInolnS4tH
MD5 SHA1 SHA512 SSDEEP

Submit Download

khaoiebndkojlmppeemjhbpbandiljpe_63_mac_acj4pge7wnngtgdmbzd4p5k36luq.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.daS1TE/khaoiebndkojlmppeemjhbpbandiljpe_63_mac_acj4pge7wnngtgdmbzd4p5k36luq.crx3
Size 5KB
SHA256 458d41f9ddcf8cb983af99e4765c6653d1e70a30d15491f5b1cbee0ce4b07907
MD5 dd093ee4be8228581afa24a12c4ff5ae
SHA1 744b07f0920111293fd8614a8c08b91a7a9fbd51
SHA512 4fc4a8453804b44d9e2bc54c01fa68e7b69a21a2ff0da8bc73386bd94ac9b173fa84f26fa801e13e384ac2842e44c69ea9443e509418ebe385ebea1df3ec205d
SSDEEP 96:/9xtg9wUeyCqkHR/4PiCZX51kyVVcsX/dAWDOmbtiQnH9QsiRcyQ0y4M1lzlo1d0:/2mU5Cq4R/mdzk27dfOmbn9QPOyMl1lJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

1.0.0.15_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.glT9yc/1.0.0.15_llkgjffcdpffmhiakmfcdcblohccpfmo.crx
Size 3KB
SHA256 3a118962ef814c91f6476bb9f0de58afa63103af6ac1b8729be9b39a86789e96
MD5 39fbc1bf4c6c8f919181e3e72630f974
SHA1 b73f2394a2c1ac341df75ba63eef4e5e9830fade
SHA512 2dbd8f772bc113f6500dace5d187b12c79e6e3a5c7f6f68d270beebc482334a1970499b28de5187a3619ff3ecd20aab10c31df8433d509dc011e1e88978ab70e
MD5 SHA1 SHA512

Submit Download

hfnkpimlhhgieaddgfemjhofmfblmnib_8754_all_adg3uxvy5lavlgtieqer4gaataaa.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.gta6wI/hfnkpimlhhgieaddgfemjhofmfblmnib_8754_all_adg3uxvy5lavlgtieqer4gaataaa.crx3
Size 25KB
SHA256 607d6ae024dc895e81765ae671b728808edc2a612c1b116177271e3d8f9c2644
MD5 d9a996e05efc89333448f05d5faac833
SHA1 9d575957df3c4b7bde0cc4d3f019909b4fdd8002
SHA512 b7506292abfbb88bdc8100cbd4c40502f3aca93ea7fbeca63c248389f19e1ae2e072fbcee48999c30206b6d03dbd2f84b7597c8ed7859749398df83e6e90fba6
SSDEEP 384:ZZqh371cGo4seDhRJn59NWl69Dz3ZXkCb4rn8/pgGusLBMP1aXDP8HP8XSe+r4:Sh371Z59NWl65z3Z0M4LidSd020Xn+r4
MD5 SHA1 SHA512 SSDEEP

Submit Download

.com.google.Chrome.jFXUTX

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.jFXUTX
Size 242KB
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
MD5 SHA1 SHA512 SSDEEP

Submit Download

dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.pmT9Vm/dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3
Size 136KB
SHA256 0c24e9bd976adffa987e08fc54dc0950c84cf18f9cdb4c5caabc6acf24887c4f
MD5 667e9eec04509aa9e2b318f580addd8c
SHA1 346267ecad10c54de52a3aeb766ea72449500326
SHA512 a9d22d49290c164abf36dd7e887063ccdd2bf508eb2d16bbac6de749e5152805ecb38ca39352706150de29a76839fa6a56c084ea4f2757b61887b3a7912be917
SSDEEP 3072:SGYNExjxgL4glOAq2HgjlKr3dUqK9tXi606uuBTgilY09X:xYNExjxk48W2AMEt507uBUilY05
MD5 SHA1 SHA512 SSDEEP

Submit Download

RobloxPlayer.zip

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/TemporaryItems/(A Document Being Saved By )/RobloxPlayer.zip
Size 173.1MB
SHA256 9c1fa959df69c1cab84419c559f5a1dcb5dbab7deca13087016d6c292daed398
MD5 88336114591238e0fc2190486312d052
SHA1 38b728b552966a2cb203ba58fac529eab87a1e9d
SHA512 47c3a37caabcd4454a3d68b4dec85ea2dc537a8da3144b88e37f6bbd8327cbc12d90f6b3bc343c95a8966b2a23bb5e25dd5a8193ebd86a4e7203610a56e134a4
SSDEEP 3145728:sl2fCsqBfohZAmUAhN2lLT77PMjKLdRH7QFXGqCgWEY93ROzFwdkn4JG:s5Whymjh8B7PMGvUFXvmE8Opokn4M
MD5 SHA1 SHA512 SSDEEP

Submit Download

spindump.txt

Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt
Size 3.3MB
SHA256 ba9482de91be7d6d53864623265525d5ff9abb7cdbf6e9602a9231905b001f28
MD5 b11064aaf54ab973d171965a02dc6865
SHA1 47b5b3d8be7a5a9b11380f02ba7dc80616a81f20
SHA512 02d15d7a3fb126d569503b69588e05bc4d6a181e93c38b0644892144f75f1d82a3de1bdff4dab5dd5f9af26bf6c18af1aa2e9b680870e9cd1cc52071b4e9cba0
SSDEEP 12288:Jgt/YZtBRhpBQTk9lKUmHXVlWovkJFoMxHkKLx2eBVjsDk0hIOLvyKJg2/lS+c+O:Ao166NrsD9iIvc
MD5 SHA1 SHA512 SSDEEP

Submit Download

spindump.txt

Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt
Size 1.6MB
SHA256 4902efba12f9044e135ceb0a3524667e8989f7d3f5382c45ad45d5ad1c418942
MD5 c89667e832133ceaa627cf9980e05b79
SHA1 5fb79600c77b77f022562216bf3708074877b5a4
SHA512 f4f6efd2a2b90bd5450c17bf59148abdf17118316a8486d1c005a19c188321a5359c34f85a25e0292a0874540f869447a42a20c95d573d1f53303ebc0b007314
SSDEEP 12288:VGvlolqJsGGCKWCv9tCgfRYzFANRK8bo1GwSC0T6Au1tqOum3a15MbRU27OeNNMI:axx
MD5 SHA1 SHA512 SSDEEP

Submit Download

MajorOSInfo.pkg

Path /var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/052-93231_EA8BECEB-B5C0-4661-A821-0F09AB34AE94/MajorOSInfo.pkg
Size 1.3MB
SHA256 21cea63c61fc638ff8557e2e79d74f5a5ca99403fc0e13febbf39b1f28dea2b8
MD5 6d8afd08c5949562e136fea58a8c0fb0
SHA1 e8dd773c008073c3af60f128377355385ab83e17
SHA512 21eb5af93eb59f376fd7cdda1a8f6732f258397dead3701c052573093ab75ca3a691e223bc0bdbd6747d0d31f25d2817782f552edc65a8c9297b4311e34df20c
SSDEEP 24576:/OtTaA+4xlTJ0CmVPybGIf1D0d9NnbKk5r9O3BLlHQC9ec0eKH2/91ar4kRKBk8:WtTaoXFfmVKbGIfe1F4VNB0eKo9a4kRA
MD5 SHA1 SHA512 SSDEEP

Submit Download

Info.plist

Path /var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/052-93231_EA8BECEB-B5C0-4661-A821-0F09AB34AE94/Payload/System/Library/CoreServices/MajorOSInfo.bundle/Contents/Info.plist
Size 861B
SHA256 f2cb9f107ce5e2593dac1643c9d69f9cf0f191a97f8e26c346765653dfec9685
MD5 333836a7eb95f49b44940b2080fb9fc2
SHA1 3a3ae4545749d078fb34d7c01afedb11798ca663
SHA512 2034e64024ae56149f4a0b10b2a3c625863efb341d91a473692f58ca495c55b0943f275a63b2a483fb3f78ca52d42b971b361905abcd3777938456aa1c30e2d9
MD5 SHA1 SHA512

Submit Download

OSBadge.icns

Path /var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/052-93231_EA8BECEB-B5C0-4661-A821-0F09AB34AE94/Payload/System/Library/CoreServices/MajorOSInfo.bundle/Contents/Resources/OSBadge.icns
Size 548KB
SHA256 ce1c529a4d9794ab9932eb99ffcb2bd0af16ef64e02daa9c716e7b0e03048f10
MD5 04bded5848e13620c42a3d1a4a5b537d
SHA1 cb24141c0313819640febc4acbdaff53b5c2b139
SHA512 f9ddc3ddb404dbf95099c492c7058174fa95f1809162fb91906916172819f15f7245634c7d1e85b220441521b008915c6bc8276ade68c025da751310e235621e
SSDEEP 12288:nwQu2Y2ru2Y2bKumCdrzVPy9XWGz2e1n/sJqM9q91iwbf9:nwJHZHIKumCFVPy9GGzjn/sJqj/9
MD5 SHA1 SHA512 SSDEEP

Submit Download

Localizable.strings

Path /var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/052-93231_EA8BECEB-B5C0-4661-A821-0F09AB34AE94/Payload/System/Library/CoreServices/MajorOSInfo.bundle/Contents/Resources/en.lproj/Localizable.strings
Size 148B
SHA256 525c6efad03dab0004451911c0ef31599085c1a260472b5f0bf995f86f2b16bb
MD5 8b4ece7adf04487c3c0892458e42d9de
SHA1 5f54a72c67c2d88ff32b57ff5b24a919e872286c
SHA512 57edaf2820cf8a541bec262a3872213a3abf1b87d32cce0e9c02d8df3601d21eb8cee02914775ca7a64585bec0f3da45791475122538e8716920848e0496d3c7
MD5 SHA1 SHA512

Submit Download

ProductMetadata.plist

Path /var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/ProductMetadata.plist
Size 1.1MB
SHA256 b6b0f5f9b9d571a7e9c602750f292595b5fc566d94d1254dda6c66fa76599dfd
MD5 29d56bab5d60bd94a6aac45ca41163cc
SHA1 ee40524d543ae3340221393f65540d1f9a0290af
SHA512 a87392dbbbff053c7ba7cfa9e3f55d8a65f9d6ae47f146eb819efd7d3e339c7f0eb04b94e07216675b2e6cf27abb1a58b19972c227471e9c04be762e11cecbda
SSDEEP 3072:Js2e6W+cmtzu1KSPG3neCuiKSx0OEKGAVK424KORCayCSxg14NcREUkx0k4F4sE/:J1A+cmtzu1KS8Rw2ZrSF
MD5 SHA1 SHA512 SSDEEP

Submit Download

fsck_hfs.log

Path /var/log/fsck_hfs.log
Size 15KB
SHA256 667077825e5fc785ced37c4b19bdf08525f468f399ef7a64fda3618adf958b0a
MD5 5770ebeefafbc0662df9ad01785ec9d6
SHA1 0644460c524746e09faa34d50bd4affd60d10eb9
SHA512 c0bc021c170e005e44ae9e8c5ea98ccc989cc529d1910d60a4c682893d388c4258c594a8d35b3c4cce1b0bcf16fc30d657141e5747563a8a41150e7208d5cce8
SSDEEP 96:iAgQ8J+kny9DFE/4lrmwFmDWnUu4fp1f4flXAnAiPcv+cr9XsdOktYZgIvUnoH0M:5gBnZ3R1SpidIf
MD5 SHA1 SHA512 SSDEEP

Submit Download

fsck_hfs.log

Path /var/log/fsck_hfs.log
Size 15KB
SHA256 b9bfa862122d58d867615dcc67444997d9373ccb57d8d921132fb65c5627a657
MD5 18a6562efb587a7cb1958bd35e4ab192
SHA1 427ab705dd4f6ef662793890952d491625081f00
SHA512 06b14508e2db1057012b7ecfdb6e8408993380d93779f98c80405fb4e01359347f7dba6e975cb1e3c4227a358b3e10bc75b90156eaa9dae035f79f286f227bd0
SSDEEP 96:iAgQ8J+kny9DFE/4lrmwFmDWnUu4fp1f4flXAnAiPcv+cr9XsdOktYZgIvUnoH0H:5gBnZ3R1SpidIU
MD5 SHA1 SHA512 SSDEEP

Submit Download

fsck_hfs.log

Path /var/log/fsck_hfs.log
Size 15KB
SHA256 1d0ed479e8ae12f426a62a2a177fff5eca773fc3892b50a1b172189e3c32694a
MD5 15c41c10859d247ce682a2ea7ae485fb
SHA1 4f4739efec16ce8b738ca514a152854074d83724
SHA512 a74ffc3bc054a600f9cf5c5c535876cc9e7dc3e8b28d9985373b3d2448739c6d302092fab9e5a4c410f3f9407190a0d265b5ec796df76f5c96777769f952b30c
SSDEEP 96:iAgQ8J+kny9DFE/4lrmwFmDWnUu4fp1f4flXAnAiPcv+cr9XsdOktYZgIvUnoH0Y:5gBnZ3R1SpidIj
MD5 SHA1 SHA512 SSDEEP

Submit Download

fsck_hfs.log

Path /var/log/fsck_hfs.log
Size 16KB
SHA256 6e4d664a5f7e3f20ce078aab474f3b946e2600909c930e8466b62773f7af8ef2
MD5 2eea738606d8338a8fa552226261a1cc
SHA1 700d59e2992545aec7bb08f240eb2e268d2cd999
SHA512 5bc1e72e82b8f7110a7fa109f2f95d0686432d90c8a448b4ff63879a794e76093df0a1b530c680984c5aa3c08ac66767ba8c56034b0a2552795a432d2f5f7c47
SSDEEP 96:iAgQ8J+kny9DFE/4lrmwFmDWnUu4fp1f4flXAnAiPcv+cr9XsdOktYZgIvUnoH0z:5gBnZ3R1SpidIw
MD5 SHA1 SHA512 SSDEEP

Submit Download

fsck_hfs.log

Path /var/log/fsck_hfs.log
Size 15KB
SHA256 305a4e46292f3877905a3d193056140b2d2146c7d96cf22ebabe33c6613019ea
MD5 a981691c902f9e749a32cbf6cbace451
SHA1 9501d1eaf9fa383741d495d433b059ca2f7ec535
SHA512 1f28d13815b2c3ade82a2edcb05eb87a33f62e7c0ff033c2fbd6ed064da8c7df712fe1862f439959794330bdf086b6b4ffc2c54659f5304ead2af28e1812b6d9
SSDEEP 96:iAgQ8J+kny9DFE/4lrmwFmDWnUu4fp1f4flXAnAiPcv+cr9XsdOktYZgIvUnoH0j:5gBnZ3R1SpidII
MD5 SHA1 SHA512 SSDEEP

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads