Malware Analysis Report

2024-10-16 06:33

Sample ID 240608-vcem1add9s
Target http://youareanidiot.com
Tags
evasion
score
4/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
4/10

Threat Level: Likely benign

The file http://youareanidiot.com was found to be: Likely benign.

Malicious Activity Summary

evasion

Application makes screenshots during execution. Possible data exfiltration.

Resource Forking

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-08 16:50

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-08 16:50

Reported

2024-06-08 16:55

Platform

macos-20240410-en

Max time kernel

300s

Max time network

304s

Command Line

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window http://youareanidiot.com"]

Signatures

Application makes screenshots during execution. Possible data exfiltration.

Description Indicator Process Target
N/A /usr/sbin/screencapture -zsuis_msg-com.apple.screenshot.launcher -uUpi N/A N/A

Resource Forking

evasion
Description Indicator Process Target
N/A "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" N/A N/A
N/A /System/Applications/Chess.app/Contents/Resources/sjeng.ChessEngine "sjeng (Chess Engine)" N/A N/A
N/A /System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool N/A N/A
N/A /System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref N/A N/A
N/A /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid N/A N/A
N/A /usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist N/A N/A
N/A /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy N/A N/A
N/A /System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd N/A N/A
N/A /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd N/A N/A
N/A /System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool N/A N/A
N/A /System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck N/A N/A
N/A /System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool N/A N/A
N/A /System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd N/A N/A

Processes

/bin/sh

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window http://youareanidiot.com"]

/bin/bash

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window http://youareanidiot.com"]

/usr/bin/sudo

[sudo /bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window http://youareanidiot.com]

/bin/zsh

[/bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window http://youareanidiot.com]

/Applications/Google Chrome.app/Contents/MacOS/Google Chrome

[/Applications/Google Chrome.app/Contents/MacOS/Google Chrome --simulate-outdated-no-au=Tue, 31 Dec 2099 --new-window http://youareanidiot.com]

/usr/libexec/dmd

[/usr/libexec/dmd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.GameController.gamecontrollerd]

/usr/libexec/gamecontrollerd

[/usr/libexec/gamecontrollerd]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler --monitor-self-annotation=ptype=crashpad-handler --database=/var/root/Library/Application Support/Google/Chrome/Crashpad --metrics-dir=/var/root/Library/Application Support/Google/Chrome --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=OS X --annotation=prod=Chrome_Mac --annotation=ver=101.0.4951.54 --handshake-fd=5]

/usr/bin/profiles

[/usr/bin/profiles status -type enrollment]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall --install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize com.google.Chrome]

/usr/bin/tar

[/usr/bin/tar -Oxjf /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz GoogleSoftwareUpdate.bundle/Contents/Info.plist]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siri.context.service]

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService

[/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU) --type=gpu-process --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --gpu-preferences=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 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=24]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CoreLocationAgent]

/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent

[/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=network --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=24]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=28]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts) --type=utility --utility-sub-type=mac_notifications.mojom.MacNotificationProvider --lang=en-GB --service-sandbox-type=none --message-loop-type-ui --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=7 --launch-time-ticks=282123768 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=20]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=6 --launch-time-ticks=282183396 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=20]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump]

/usr/sbin/spindump

[/usr/sbin/spindump]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tailspind]

/usr/libexec/tailspind

[/usr/libexec/tailspind]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputMenuAgent]

/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent

[/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pbs]

/System/Library/CoreServices/pbs

[/System/Library/CoreServices/pbs]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputSwitcher]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin

[/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin --productid com.google.Chrome --print-tickets --store /Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore]

/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher

[/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher]

/usr/libexec/xpcproxy

[xpcproxy com.apple.SafariLaunchAgent]

/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent

[/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=8 --launch-time-ticks=288262312 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=72]

/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher

[/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=12 --launch-time-ticks=288568056 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=20]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=10 --launch-time-ticks=288592775 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=20]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=11 --launch-time-ticks=288698998 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=66]

/usr/libexec/xpcproxy

[xpcproxy com.apple.PerformanceAnalysis.animationperfd]

/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd

[/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=83]

/usr/sbin/system_profiler

[/usr/sbin/system_profiler SPConfigurationProfileDataType -detailLevel mini -timeout 15 -xml]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=100]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=107]

/Library/Application Support/Google/GoogleUpdater/124.0.6359.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[GoogleUpdater --server --service=update --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/updater/*=2 --system]

/Library/Application Support/Google/GoogleUpdater/124.0.6359.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[/Library/Application Support/Google/GoogleUpdater/124.0.6359.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --crash-handler --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/updater/*=2 --system --database=/Library/Application Support/Google/GoogleUpdater/124.0.6359.0/Crashpad --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=124.0.6359.0 --handshake-fd=5]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=113]

/usr/bin/profiles

[/usr/bin/profiles status -type enrollment]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin

[/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin -P com.google.Chrome --delete --user-store]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=71]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sysmond]

/usr/libexec/sysmond

[/usr/libexec/sysmond]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.cloudkeychainproxy3]

/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy

[/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump_agent]

/usr/libexec/spindump_agent

[/usr/libexec/spindump_agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.suggestd]

/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd

[/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.knowledge-agent]

/usr/libexec/knowledge-agent

[/usr/libexec/knowledge-agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AddressBook.ContactsAccountsService]

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService

[/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.geod]

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod

[/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod]

/usr/libexec/xpcproxy

[xpcproxy com.apple.geod]

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod

[/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secinitd]

/usr/libexec/secinitd

[/usr/libexec/secinitd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.routined]

/usr/libexec/routined

[/usr/libexec/routined LAUNCHED_BY_LAUNCHD]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Maps.mapspushd]

/System/Library/CoreServices/mapspushd

[/System/Library/CoreServices/mapspushd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A]

/usr/libexec/neagent

[/usr/libexec/neagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportCrash]

/System/Library/CoreServices/ReportCrash

[/System/Library/CoreServices/ReportCrash agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportMemoryException]

/usr/libexec/ReportMemoryException

[/usr/libexec/ReportMemoryException]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=29]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=29]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=28]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=28]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=29]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=29]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=28]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Dictionary.1776]

/System/Applications/Dictionary.app/Contents/MacOS/Dictionary

[/System/Applications/Dictionary.app/Contents/MacOS/Dictionary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.calculator.2132]

/System/Applications/Calculator.app/Contents/MacOS/Calculator

[/System/Applications/Calculator.app/Contents/MacOS/Calculator]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siri.launcher.1708]

/System/Applications/Siri.app/Contents/MacOS/Siri

[/System/Applications/Siri.app/Contents/MacOS/Siri]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=27 --launch-time-ticks=354681252 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=49]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=26 --launch-time-ticks=354727420 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=49]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AddressBook.1780]

/System/Applications/Contacts.app/Contents/MacOS/Contacts

[/System/Applications/Contacts.app/Contents/MacOS/Contacts]

/usr/libexec/xpcproxy

[xpcproxy com.apple.backup.launcher.1784]

/System/Applications/Time Machine.app/Contents/MacOS/Time Machine

[/System/Applications/Time Machine.app/Contents/MacOS/Time Machine]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Siri.2292]

/usr/libexec/xpcproxy

[xpcproxy com.apple.FontBook.1856]

/System/Library/CoreServices/Siri.app/Contents/MacOS/Siri

[/System/Library/CoreServices/Siri.app/Contents/MacOS/Siri]

/System/Applications/Font Book.app/Contents/MacOS/Font Book

[/System/Applications/Font Book.app/Contents/MacOS/Font Book]

/usr/libexec/xpcproxy

[xpcproxy com.apple.systempreferences.2140]

/System/Applications/System Preferences.app/Contents/MacOS/System Preferences

[/System/Applications/System Preferences.app/Contents/MacOS/System Preferences]

/usr/libexec/xpcproxy

[xpcproxy com.apple.findmy.1716]

/System/Applications/FindMy.app/Contents/MacOS/FindMy

[/System/Applications/FindMy.app/Contents/MacOS/FindMy]

/usr/libexec/xpcproxy

[xpcproxy com.apple.launchpad.launcher.2144]

/System/Applications/Launchpad.app/Contents/MacOS/Launchpad

[/System/Applications/Launchpad.app/Contents/MacOS/Launchpad]

/usr/libexec/xpcproxy

[xpcproxy com.apple.FaceTime.1860]

/System/Applications/FaceTime.app/Contents/MacOS/FaceTime

[/System/Applications/FaceTime.app/Contents/MacOS/FaceTime]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Maps.1864]

/System/Applications/Maps.app/Contents/MacOS/Maps

[/System/Applications/Maps.app/Contents/MacOS/Maps]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Chess.1724]

/System/Applications/Chess.app/Contents/MacOS/Chess

[/System/Applications/Chess.app/Contents/MacOS/Chess]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mail.2576]

/System/Applications/Mail.app/Contents/MacOS/Mail

[/System/Applications/Mail.app/Contents/MacOS/Mail]

/usr/libexec/xpcproxy

[xpcproxy com.apple.exposelauncher.1868]

/System/Applications/Mission Control.app/Contents/MacOS/Mission Control

[/System/Applications/Mission Control.app/Contents/MacOS/Mission Control]

/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool

[/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool]

/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool

[/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool]

/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck

[/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck]

/usr/libexec/xpcproxy

[xpcproxy com.apple.PhotoBooth.2580]

/System/Applications/Photo Booth.app/Contents/MacOS/Photo Booth

[/System/Applications/Photo Booth.app/Contents/MacOS/Photo Booth]

/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref

[/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref]

/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool

[/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool]

/usr/libexec/xpcproxy

[xpcproxy com.apple.nfcd]

/usr/libexec/nfcd

[/usr/libexec/nfcd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Stickies.1872]

/System/Applications/Stickies.app/Contents/MacOS/Stickies

[/System/Applications/Stickies.app/Contents/MacOS/Stickies]

/usr/libexec/xpcproxy

[xpcproxy com.apple.QuickTimePlayerX.2584]

/System/Applications/QuickTime Player.app/Contents/MacOS/QuickTime Player

[/System/Applications/QuickTime Player.app/Contents/MacOS/QuickTime Player]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CoreAuthentication.agent]

/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd

[/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iBooksX.1732]

/System/Applications/Books.app/Contents/MacOS/Books

[/System/Applications/Books.app/Contents/MacOS/Books]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Photos.1876]

/System/Applications/Photos.app/Contents/MacOS/Photos

[/System/Applications/Photos.app/Contents/MacOS/Photos]

/usr/libexec/xpcproxy

[xpcproxy com.apple.uikitsystemapp]

/System/Applications/Podcasts.app/Contents/MacOS/Podcasts

[/System/Applications/Podcasts.app/Contents/MacOS/Podcasts]

/System/Library/CoreServices/UIKitSystem.app/Contents/MacOS/UIKitSystem

[/System/Library/CoreServices/UIKitSystem.app/Contents/MacOS/UIKitSystem system_app_start]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Notes.1736]

/System/Applications/Notes.app/Contents/MacOS/Notes

[/System/Applications/Notes.app/Contents/MacOS/Notes]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iChat.1880]

/System/Applications/Messages.app/Contents/MacOS/Messages

[/System/Applications/Messages.app/Contents/MacOS/Messages]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextEdit.2092]

/System/Applications/TextEdit.app/Contents/MacOS/TextEdit

[/System/Applications/TextEdit.app/Contents/MacOS/TextEdit]

/usr/libexec/xpcproxy

[xpcproxy com.apple.reminders.2592]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AccountProfileRemoteViewService 683]

/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService

[/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService]

/System/Applications/Reminders.app/Contents/MacOS/Reminders

[/System/Applications/Reminders.app/Contents/MacOS/Reminders]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Image_Capture.1740]

/System/Applications/Image Capture.app/Contents/MacOS/Image Capture

[/System/Applications/Image Capture.app/Contents/MacOS/Image Capture]

/usr/libexec/xpcproxy

[xpcproxy com.microsoft.Word.2024]

/Applications/Microsoft Word.app/Contents/MacOS/Microsoft Word

[/Applications/Microsoft Word.app/Contents/MacOS/Microsoft Word]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Automator.2596]

/System/Applications/Automator.app/Contents/MacOS/Automator

[/System/Applications/Automator.app/Contents/MacOS/Automator]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Home.1744]

/System/Applications/Home.app/Contents/MacOS/Home

[/System/Applications/Home.app/Contents/MacOS/Home]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Safari.2028]

/Applications/Safari.app/Contents/MacOS/Safari

[/Applications/Safari.app/Contents/MacOS/Safari]

/usr/libexec/xpcproxy

[xpcproxy com.apple.VoiceMemos.1888]

/System/Applications/VoiceMemos.app/Contents/MacOS/VoiceMemos

[/System/Applications/VoiceMemos.app/Contents/MacOS/VoiceMemos]

/usr/libexec/xpcproxy

[xpcproxy com.apple.assistantd]

/usr/libexec/xpcproxy

[xpcproxy com.microsoft.Excel.2032]

/usr/libexec/xpcproxy

[xpcproxy com.apple.studentd]

/usr/libexec/studentd

[/usr/libexec/studentd]

/Applications/Microsoft Excel.app/Contents/MacOS/Microsoft Excel

[/Applications/Microsoft Excel.app/Contents/MacOS/Microsoft Excel]

/usr/libexec/xpcproxy

[xpcproxy com.microsoft.Outlook.2036]

/usr/libexec/xpcproxy

[xpcproxy com.apple.icloud.searchpartyuseragent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.akd]

/usr/libexec/searchpartyuseragent

[/usr/libexec/searchpartyuseragent]

/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd

[/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.adid]

/System/Library/PrivateFrameworks/CoreADI.framework/adid

[/System/Library/PrivateFrameworks/CoreADI.framework/adid]

/Applications/Microsoft Outlook.app/Contents/MacOS/Microsoft Outlook

[/Applications/Microsoft Outlook.app/Contents/MacOS/Microsoft Outlook]

/usr/libexec/xpcproxy

[xpcproxy com.microsoft.onenote.mac.2040]

/Applications/Microsoft OneNote.app/Contents/MacOS/Microsoft OneNote

[/Applications/Microsoft OneNote.app/Contents/MacOS/Microsoft OneNote]

/System/Applications/Music.app/Contents/MacOS/Music

[/System/Applications/Music.app/Contents/MacOS/Music]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AppStore.1900]

/System/Applications/App Store.app/Contents/MacOS/App Store

[/System/Applications/App Store.app/Contents/MacOS/App Store]

/usr/libexec/xpcproxy

[xpcproxy com.microsoft.Powerpoint.2044]

/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint

[/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint]

/System/Applications/TV.app/Contents/MacOS/TV

[/System/Applications/TV.app/Contents/MacOS/TV]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iCal.1908]

/System/Applications/Calendar.app/Contents/MacOS/Calendar

[/System/Applications/Calendar.app/Contents/MacOS/Calendar]

/usr/libexec/xpcproxy

[xpcproxy com.apple.stocks.1768]

/System/Applications/Stocks.app/Contents/MacOS/Stocks

[/System/Applications/Stocks.app/Contents/MacOS/Stocks]

/usr/libexec/xpcproxy

[xpcproxy com.apple.audio.AudioComponentRegistrar]

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar

[/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar]

/usr/libexec/xpcproxy

[xpcproxy com.apple.accessibility.mediaaccessibilityd]

/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd

[/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mediaremoted]

/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted

[/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=28 --launch-time-ticks=379465482 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=51]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=92]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=92]

/usr/libexec/xpcproxy

[xpcproxy com.apple.icloud.fmfd]

/usr/libexec/fmfd

[/usr/libexec/fmfd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iCloudHelper]

/System/Library/PrivateFrameworks/AOSKit.framework/Versions/A/XPCServices/com.apple.iCloudHelper.xpc/Contents/MacOS/com.apple.iCloudHelper

[/System/Library/PrivateFrameworks/AOSKit.framework/Versions/A/XPCServices/com.apple.iCloudHelper.xpc/Contents/MacOS/com.apple.iCloudHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.contacts.donation-agent]

/System/Library/PrivateFrameworks/ContactsDonation.framework/Versions/A/Support/contactsdonationagent

[/System/Library/PrivateFrameworks/ContactsDonation.framework/Versions/A/Support/contactsdonationagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.SiriUI.SiriUISetupXPC 681]

/System/Library/PrivateFrameworks/SiriUI.framework/Versions/A/XPCServices/SiriUISetupXPC.xpc/Contents/MacOS/SiriUISetupXPC

[/System/Library/PrivateFrameworks/SiriUI.framework/Versions/A/XPCServices/SiriUISetupXPC.xpc/Contents/MacOS/SiriUISetupXPC]

/usr/libexec/xpcproxy

[xpcproxy com.apple.DictionaryServiceHelper]

/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper

[/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.videoconference.camera]

/usr/libexec/avconferenced

[/usr/libexec/avconferenced]

/usr/libexec/xpcproxy

[xpcproxy com.apple.FaceTime.FaceTimeNotificationCenterService 686]

/System/Applications/FaceTime.app/Contents/XPCServices/FaceTimeNotificationCenterService.xpc/Contents/MacOS/FaceTimeNotificationCenterService

[/System/Applications/FaceTime.app/Contents/XPCServices/FaceTimeNotificationCenterService.xpc/Contents/MacOS/FaceTimeNotificationCenterService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.imfoundation.IMRemoteURLConnectionAgent 751]

/usr/libexec/xpcproxy

[xpcproxy com.apple.imfoundation.IMRemoteURLConnectionAgent 686]

/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent

[/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent]

/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent

[/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.speech.speechsynthesisd]

/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd

[/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.StickiesMigration 698]

/System/Applications/Stickies.app/Contents/XPCServices/StickiesMigration.xpc/Contents/MacOS/StickiesMigration

[/System/Applications/Stickies.app/Contents/XPCServices/StickiesMigration.xpc/Contents/MacOS/StickiesMigration]

/usr/libexec/xpcproxy

[xpcproxy com.apple.gamed]

/System/Library/PrivateFrameworks/GameCenterFoundation.framework/Versions/A/gamed

[/System/Library/PrivateFrameworks/GameCenterFoundation.framework/Versions/A/gamed]

/usr/libexec/xpcproxy

[xpcproxy com.apple.WeatherService]

/System/Library/PrivateFrameworks/WeatherFoundation.framework/Versions/A/XPCServices/WeatherService.xpc/Contents/MacOS/WeatherService

[/System/Library/PrivateFrameworks/WeatherFoundation.framework/Versions/A/XPCServices/WeatherService.xpc/Contents/MacOS/WeatherService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siri.launcher.1708]

/System/Applications/Siri.app/Contents/MacOS/Siri

[/System/Applications/Siri.app/Contents/MacOS/Siri]

/usr/libexec/xpcproxy

[xpcproxy com.apple.backup.launcher.1784]

/System/Applications/Time Machine.app/Contents/MacOS/Time Machine

[/System/Applications/Time Machine.app/Contents/MacOS/Time Machine]

/usr/libexec/xpcproxy

[xpcproxy com.apple.launchpad.launcher.2144]

/System/Applications/Launchpad.app/Contents/MacOS/Launchpad

[/System/Applications/Launchpad.app/Contents/MacOS/Launchpad]

/usr/libexec/xpcproxy

[xpcproxy com.apple.exposelauncher.1868]

/System/Applications/Mission Control.app/Contents/MacOS/Mission Control

[/System/Applications/Mission Control.app/Contents/MacOS/Mission Control]

/usr/libexec/xpcproxy

[xpcproxy com.apple.cmfsyncagent]

/System/Library/PrivateFrameworks/CommunicationsFilter.framework/CMFSyncAgent

[/System/Library/PrivateFrameworks/CommunicationsFilter.framework/CMFSyncAgent]

/System/Applications/Chess.app/Contents/Resources/sjeng.ChessEngine

[/System/Applications/Chess.app/Contents/Resources/sjeng.ChessEngine sjeng (Chess Engine)]

/usr/libexec/xpcproxy

[xpcproxy com.apple.SpeechRecognitionCore.brokerd]

/System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XPCServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.SpeechRecognitionCore.brokerd

[/System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XPCServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/MacOS/com.apple.SpeechRecognitionCore.brokerd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.DictationIM]

/System/Library/Input Methods/DictationIM.app/Contents/MacOS/DictationIM

[/System/Library/Input Methods/DictationIM.app/Contents/MacOS/DictationIM]

/usr/libexec/xpcproxy

[xpcproxy com.apple.audio.SandboxHelper 701]

/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper

[/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.colorsync.useragent]

/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent

[/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.colorsyncd]

/usr/libexec/colorsyncd

[/usr/libexec/colorsyncd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siriknowledged]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputMenuAgent]

/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent

[/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputSwitcher]

/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher

[/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher]

/usr/libexec/xpcproxy

[xpcproxy com.apple.imdpersistence.IMDPersistenceAgent]

/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent

[/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.audio.toolbox.reporting.service]

/System/Library/Frameworks/AudioToolbox.framework/XPCServices/CAReportingService.xpc/Contents/MacOS/CAReportingService

[/System/Library/Frameworks/AudioToolbox.framework/XPCServices/CAReportingService.xpc/Contents/MacOS/CAReportingService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.rtcreportingd]

/usr/libexec/rtcreportingd

[/usr/libexec/rtcreportingd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pbs]

/System/Library/CoreServices/pbs

[/System/Library/CoreServices/pbs]

/usr/libexec/xpcproxy

[xpcproxy com.apple.icloud.fmfd]

/usr/libexec/fmfd

[/usr/libexec/fmfd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.imfoundation.IMRemoteURLConnectionAgent 707]

/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent

[/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iCloudHelper]

/System/Library/PrivateFrameworks/AOSKit.framework/Versions/A/XPCServices/com.apple.iCloudHelper.xpc/Contents/MacOS/com.apple.iCloudHelper

[/System/Library/PrivateFrameworks/AOSKit.framework/Versions/A/XPCServices/com.apple.iCloudHelper.xpc/Contents/MacOS/com.apple.iCloudHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siri.launcher.1708]

/System/Applications/Siri.app/Contents/MacOS/Siri

[/System/Applications/Siri.app/Contents/MacOS/Siri]

/usr/libexec/xpcproxy

[xpcproxy com.apple.backup.launcher.1784]

/System/Applications/Time Machine.app/Contents/MacOS/Time Machine

[/System/Applications/Time Machine.app/Contents/MacOS/Time Machine]

/usr/libexec/xpcproxy

[xpcproxy com.apple.launchpad.launcher.2144]

/System/Applications/Launchpad.app/Contents/MacOS/Launchpad

[/System/Applications/Launchpad.app/Contents/MacOS/Launchpad]

/usr/libexec/xpcproxy

[xpcproxy com.apple.exposelauncher.1868]

/System/Applications/Mission Control.app/Contents/MacOS/Mission Control

[/System/Applications/Mission Control.app/Contents/MacOS/Mission Control]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CharacterPicker.FileService]

/System/Library/PrivateFrameworks/CharacterPicker.framework/Versions/A/XPCServices/com.apple.CharacterPicker.FileService.xpc/Contents/MacOS/com.apple.CharacterPicker.FileService

[/System/Library/PrivateFrameworks/CharacterPicker.framework/Versions/A/XPCServices/com.apple.CharacterPicker.FileService.xpc/Contents/MacOS/com.apple.CharacterPicker.FileService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.StreamingUnzipService 188]

/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService

[/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Safari.History]

/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History

[/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ScreenTimeAgent]

/System/Library/PrivateFrameworks/ScreenTimeCore.framework/Versions/A/ScreenTimeAgent

[/System/Library/PrivateFrameworks/ScreenTimeCore.framework/Versions/A/ScreenTimeAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.WebKit.WebContent.52947B75-9F2A-4115-803E-00D3EEA3D2BF 715]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pluginkit.pkd]

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

[/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent]

/usr/libexec/pkd

[/usr/libexec/pkd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.colorsync.useragent]

/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent

[/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.colorsyncd]

/usr/libexec/colorsyncd

[/usr/libexec/colorsyncd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.SafariLaunchAgent]

/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent

[/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mediaremoted]

/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted

[/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted]

/usr/libexec/xpcproxy

[xpcproxy com.apple.akd]

/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd

[/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.WebKit.WebContent.6A98453C-C597-4ED5-BE98-886791E17AD3 715]

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

[/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.adid]

/System/Library/PrivateFrameworks/CoreADI.framework/adid

[/System/Library/PrivateFrameworks/CoreADI.framework/adid]

/usr/libexec/siriknowledged

[/usr/libexec/siriknowledged]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=97]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CalendarAgent]

/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent

[/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent]

/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd

[/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.voicememod]

/System/iOSSupport/System/Library/PrivateFrameworks/VoiceMemos.framework/Support/voicememod

[/System/iOSSupport/System/Library/PrivateFrameworks/VoiceMemos.framework/Support/voicememod]

/usr/libexec/xpcproxy

[xpcproxy com.apple.homed]

/System/Library/PrivateFrameworks/HomeKitDaemon.framework/Support/homed

[/System/Library/PrivateFrameworks/HomeKitDaemon.framework/Support/homed]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ap.adprivacyd]

/usr/libexec/adprivacyd

[/usr/libexec/adprivacyd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.coreduetd]

/usr/libexec/coreduetd

[/usr/libexec/coreduetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.coremedia.videodecoder 728]

/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService

[/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,9029447100998088238,5385499263717388657,131072 --seatbelt-client=103]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siri.launcher.1708]

/System/Applications/Siri.app/Contents/MacOS/Siri

[/System/Applications/Siri.app/Contents/MacOS/Siri]

/usr/libexec/xpcproxy

[xpcproxy com.apple.backup.launcher.1784]

/usr/libexec/xpcproxy

[xpcproxy com.apple.GameController.gamecontrollerd]

/System/Applications/Time Machine.app/Contents/MacOS/Time Machine

[/System/Applications/Time Machine.app/Contents/MacOS/Time Machine]

/usr/libexec/gamecontrollerd

[/usr/libexec/gamecontrollerd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.storedownloadd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.launchpad.launcher.2144]

/System/Applications/Launchpad.app/Contents/MacOS/Launchpad

[/System/Applications/Launchpad.app/Contents/MacOS/Launchpad]

/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd

[/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.exposelauncher.1868]

/System/Applications/Mission Control.app/Contents/MacOS/Mission Control

[/System/Applications/Mission Control.app/Contents/MacOS/Mission Control]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump_agent]

/usr/libexec/spindump_agent

[/usr/libexec/spindump_agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Safari.History]

/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History

[/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportCrash]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/System/Library/CoreServices/ReportCrash

[/System/Library/CoreServices/ReportCrash agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputMenuAgent]

/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent

[/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.adid]

/System/Library/PrivateFrameworks/CoreADI.framework/adid

[/System/Library/PrivateFrameworks/CoreADI.framework/adid]

/usr/libexec/xpcproxy

[xpcproxy com.apple.keychainaccess.1820]

/System/Applications/Utilities/Keychain Access.app/Contents/MacOS/Keychain Access

[/System/Applications/Utilities/Keychain Access.app/Contents/MacOS/Keychain Access]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Safari.History]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ActivityMonitor.1800]

/System/Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor

[/System/Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor]

/usr/libexec/xpcproxy

[xpcproxy com.apple.dmd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.akd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.MigrateAssistant.1824]

/System/Applications/Utilities/Migration Assistant.app/Contents/MacOS/Migration Assistant

[/System/Applications/Utilities/Migration Assistant.app/Contents/MacOS/Migration Assistant]

/usr/libexec/xpcproxy

[xpcproxy com.apple.bootcampassistant.1848]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History

[/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History]

/System/Applications/Utilities/Boot Camp Assistant.app/Contents/MacOS/Boot Camp Assistant

[/System/Applications/Utilities/Boot Camp Assistant.app/Contents/MacOS/Boot Camp Assistant]

/usr/libexec/xpcproxy

[xpcproxy com.apple.DiskUtility.2148]

/System/Applications/Utilities/Disk Utility.app/Contents/MacOS/Disk Utility

[/System/Applications/Utilities/Disk Utility.app/Contents/MacOS/Disk Utility]

/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd

[/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.screenshot.launcher.1804]

/System/Applications/Utilities/Screenshot.app/Contents/MacOS/Screenshot

[/System/Applications/Utilities/Screenshot.app/Contents/MacOS/Screenshot]

/usr/libexec/dmd

[/usr/libexec/dmd]

/usr/sbin/screencapture

[/usr/sbin/screencapture -zsuis_msg-com.apple.screenshot.launcher -uUpi]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ScriptEditor2.1828]

/System/Applications/Utilities/Script Editor.app/Contents/MacOS/Script Editor

[/System/Applications/Utilities/Script Editor.app/Contents/MacOS/Script Editor]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.DigitalColorMeter.1852]

/System/Applications/Utilities/Digital Color Meter.app/Contents/MacOS/Digital Color Meter

[/System/Applications/Utilities/Digital Color Meter.app/Contents/MacOS/Digital Color Meter]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AddressBook.ContactsAccountsService]

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService

[/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.appleseed.FeedbackAssistant.2152]

/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/MacOS/Feedback Assistant

[/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/MacOS/Feedback Assistant]

/usr/libexec/xpcproxy

[xpcproxy com.apple.colorsync.useragent]

/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent

[/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.grapher.1808]

/usr/libexec/xpcproxy

[xpcproxy com.apple.colorsyncd]

/System/Applications/Utilities/Grapher.app/Contents/MacOS/Grapher

[/System/Applications/Utilities/Grapher.app/Contents/MacOS/Grapher]

/usr/libexec/xpcproxy

[xpcproxy com.apple.BluetoothFileExchange.2108]

/System/Applications/Utilities/Bluetooth File Exchange.app/Contents/MacOS/Bluetooth File Exchange

[/System/Applications/Utilities/Bluetooth File Exchange.app/Contents/MacOS/Bluetooth File Exchange]

/usr/libexec/colorsyncd

[/usr/libexec/colorsyncd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ColorSyncUtility.1832]

/System/Applications/Utilities/ColorSync Utility.app/Contents/MacOS/ColorSync Utility

[/System/Applications/Utilities/ColorSync Utility.app/Contents/MacOS/ColorSync Utility]

/usr/libexec/xpcproxy

[xpcproxy com.apple.storagekitd]

/System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd

[/System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.airport.airportutility.1788]

/System/Applications/Utilities/AirPort Utility.app/Contents/MacOS/AirPort Utility

[/System/Applications/Utilities/AirPort Utility.app/Contents/MacOS/AirPort Utility]

/usr/libexec/xpcproxy

[xpcproxy com.apple.audio.AudioMIDISetup.1812]

/System/Applications/Utilities/Audio MIDI Setup.app/Contents/MacOS/Audio MIDI Setup

[/System/Applications/Utilities/Audio MIDI Setup.app/Contents/MacOS/Audio MIDI Setup]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Console.1836]

/System/Applications/Utilities/Console.app/Contents/MacOS/Console

[/System/Applications/Utilities/Console.app/Contents/MacOS/Console]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Terminal.2100]

/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal

[/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal]

/usr/libexec/xpcproxy

[xpcproxy com.apple.storeuid]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AssetCacheManagerService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.VoiceOverUtility.1792]

/System/Applications/Utilities/VoiceOver Utility.app/Contents/MacOS/VoiceOver Utility

[/System/Applications/Utilities/VoiceOver Utility.app/Contents/MacOS/VoiceOver Utility]

/usr/libexec/xpcproxy

[xpcproxy com.apple.bird]

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird

[/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird]

/System/Library/PrivateFrameworks/AssetCacheServicesExtensions.framework/XPCServices/AssetCacheManagerService.xpc/Contents/MacOS/AssetCacheManagerService

[/System/Library/PrivateFrameworks/AssetCacheServicesExtensions.framework/XPCServices/AssetCacheManagerService.xpc/Contents/MacOS/AssetCacheManagerService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid

[/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid]

/usr/libexec/xpcproxy

[xpcproxy com.apple.systemprofiler]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/System/Applications/Utilities/System Information.app/Contents/MacOS/System Information

[/System/Applications/Utilities/System Information.app/Contents/MacOS/System Information]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesd]

/System/Library/CoreServices/iconservicesd

[/System/Library/CoreServices/iconservicesd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siriknowledged]

/usr/libexec/xpcproxy

[xpcproxy com.apple.bootcampassistant.ExFATChecksum 849]

/usr/libexec/xpcproxy

[xpcproxy com.apple.xpc.roleaccountd]

/usr/libexec/xpcroleaccountd

[/usr/libexec/xpcroleaccountd -launchd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sysmond]

/usr/libexec/sysmond

[/usr/libexec/sysmond]

/private/var/db/com.apple.xpc.roleaccountd.staging/com.apple.bootcampassistant.ExFATChecksum.16777223.1152921500312351016.xpc/Contents/MacOS/ExFATChecksum

[/private/var/db/com.apple.xpc.roleaccountd.staging/com.apple.bootcampassistant.ExFATChecksum.16777223.1152921500312351016.xpc/Contents/MacOS/ExFATChecksum]

/usr/bin/login

[login -pf run]

/usr/libexec/xpcproxy

[xpcproxy com.apple.audio.systemsoundserverd]

/usr/sbin/systemsoundserverd

[/usr/sbin/systemsoundserverd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.screencaptureui.agent]

/System/Library/CoreServices/screencaptureui.app/Contents/MacOS/screencaptureui

[/System/Library/CoreServices/screencaptureui.app/Contents/MacOS/screencaptureui]

/usr/libexec/xpcproxy

[xpcproxy com.apple.audio.AudioComponentRegistrar]

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar

[/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AccountPolicyHelper]

/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper

[/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper]

/bin/zsh

[-zsh]

/usr/libexec/path_helper

[/usr/libexec/path_helper -s]

/usr/bin/locale

[locale LC_CTYPE]

/usr/libexec/xpcproxy

[xpcproxy com.apple.icloud.findmydeviced]

/usr/libexec/findmydeviced

[/usr/libexec/findmydeviced]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siri.context.service]

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService

[/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Safari.History]

/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History

[/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History]

/usr/bin/csrutil

[/usr/bin/csrutil status]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pbs]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump]

/usr/sbin/spindump

[/usr/sbin/spindump]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tailspind]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump_agent]

/usr/libexec/tailspind

[/usr/libexec/tailspind]

/usr/libexec/spindump_agent

[/usr/libexec/spindump_agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/System/Library/CoreServices/pbs

[/System/Library/CoreServices/pbs]

Network

Country Destination Domain Proto
US 20.189.173.2:443 tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 b._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 db._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 b._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 db._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 youareanidiot.com udp
US 8.8.8.8:53 dns.google udp
US 96.126.123.244:80 youareanidiot.com tcp
US 96.126.123.244:80 youareanidiot.com tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 clients2.google.com udp
US 8.8.4.4:443 dns.google tcp
FR 216.58.213.78:443 clients2.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
FR 172.217.20.196:443 www.google.com tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google udp
FR 142.250.178.138:443 optimizationguide-pa.googleapis.com tcp
US 8.8.8.8:53 mobile.events.data.trafficmanager.net udp
US 20.42.73.25:443 tcp
GB 51.132.193.105:443 mobile.events.data.trafficmanager.net tcp
US 8.8.8.8:53 bag-cdn-lb.itunes-apple.com.akadns.net udp
GB 17.253.77.201:80 valid.apple.com tcp
US 8.8.8.8:53 gspe1-ssl.ls.apple.com.edgesuite.net udp
NL 23.209.125.28:443 tcp
US 8.8.8.8:53 e4686.dsce9.akamaiedge.net udp
NL 72.246.172.153:443 tcp
US 8.8.8.8:53 a479.dscg4.akamai.net udp
GB 104.91.71.135:443 gspe1-ssl.ls.apple.com.edgesuite.net tcp
US 8.8.4.4:443 dns.google udp
FR 172.217.20.195:443 update.googleapis.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 e10499.dsce9.akamaiedge.net udp
NL 142.250.27.84:443 accounts.google.com tcp
NL 142.250.27.84:443 accounts.google.com tcp
FR 172.217.20.196:443 www.google.com tcp
US 8.8.8.8:53 ax.itunes.apple.com udp
US 8.8.8.8:53 e4686.dsce9.akamaiedge.net udp
US 8.8.8.8:53 gsp-ssl.ls.apple.com udp
GB 17.253.77.204:443 gsp-ssl.ls.apple.com tcp
GB 17.57.146.152:5223 tcp
US 8.8.8.8:53 e6858.dscx.akamaiedge.net udp
BE 23.55.96.225:443 e6858.dscx.akamaiedge.net tcp
US 8.8.4.4:443 dns.google udp
FR 172.217.20.196:443 www.google.com tcp
US 8.8.8.8:53 46-courier.push.apple.com udp
GB 17.57.146.7:5223 46-courier.push.apple.com tcp
GB 17.57.146.8:5223 46-courier.push.apple.com tcp
US 8.8.8.8:53 a479.dscg4.akamai.net udp
US 8.8.8.8:53 gspe19-ssl.ls.apple.com udp
FR 142.250.178.142:443 apis.google.com tcp
FR 172.217.20.174:443 play.google.com tcp
US 8.8.8.8:53 fmfmobile.icloud.com udp
US 8.8.8.8:53 fmipmobile.icloud.com udp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
US 8.8.8.8:53 e6858.dscx.akamaiedge.net udp
US 8.8.8.8:53 e673.dsce9.akamaiedge.net udp
US 8.8.8.8:53 e10499.dsce9.akamaiedge.net udp
US 8.8.8.8:53 a1366.dscapi6.akamai.net udp
GB 104.91.71.139:443 a1366.dscapi6.akamai.net tcp
US 8.8.8.8:53 profile.ess.apple.com udp
US 17.145.0.2:443 profile.ess.apple.com tcp
US 8.8.8.8:53 init.gc.apple.com udp
GB 23.208.246.145:443 init.gc.apple.com tcp
US 8.8.8.8:53 static.gc.apple.com udp
GB 23.208.246.145:443 static.gc.apple.com tcp
US 8.8.8.8:53 profile.gc.apple.com udp
GB 17.250.81.66:443 profile.gc.apple.com tcp
US 8.8.8.8:53 a479.dscg4.akamai.net udp
US 8.8.8.8:53 gspe21-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 gsp64-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 a1051.dscw154.akamai.net udp
US 8.8.8.8:53 e673.dsce9.akamaiedge.net udp
US 8.8.8.8:53 comm-main.ess.apple.com udp
US 8.8.8.8:53 comm-cohort.ess.apple.com udp
US 17.188.171.203:3480 comm-main.ess.apple.com udp
US 17.188.171.203:3481 comm-main.ess.apple.com udp
US 17.188.171.226:3482 comm-cohort.ess.apple.com udp
US 17.188.171.203:3480 comm-main.ess.apple.com udp
US 17.188.171.203:3481 comm-main.ess.apple.com udp
US 17.188.171.226:3482 comm-cohort.ess.apple.com udp
GB 191.101.209.39:52689 udp
GB 191.101.209.39:16403 udp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
US 8.8.8.8:53 gateway.fe2.apple-dns.net udp
US 8.8.4.4:443 dns.google udp
FR 172.217.20.195:443 update.googleapis.com tcp
FR 142.250.75.234:443 optimizationguide-pa.googleapis.com tcp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
FR 142.250.75.234:443 optimizationguide-pa.googleapis.com tcp
US 8.8.8.8:53 apps.mzstatic.com udp
US 8.8.8.8:53 s.mzstatic.com udp
US 8.8.8.8:53 play.itunes.apple.com udp
NL 23.63.101.177:443 play.itunes.apple.com tcp
US 8.8.8.8:53 sf-api-token-service.itunes.apple.com udp
BE 23.55.96.25:443 sf-api-token-service.itunes.apple.com tcp
US 8.8.8.8:53 buy.itunes.apple.com udp
US 17.156.128.10:443 buy.itunes.apple.com tcp
US 8.8.8.8:53 amp-api-edge.apps.apple.com udp
GB 88.221.135.105:443 amp-api-edge.apps.apple.com tcp
US 8.8.8.8:53 www.icloud.com udp
US 8.8.8.8:53 c.apple.news udp
US 8.8.8.8:53 is1-ssl.mzstatic.com udp
GB 95.100.244.21:443 is1-ssl.mzstatic.com tcp
GB 17.253.77.201:80 c.apple.news tcp
US 8.8.8.8:53 amp-api.apps.apple.com udp
BE 23.55.96.123:443 amp-api.apps.apple.com tcp
GB 17.253.77.201:80 c.apple.news tcp
US 8.8.8.8:53 apptrailers.itunes.apple.com udp
US 8.8.8.8:53 apple-finance.query.yahoo.com udp
IE 87.248.100.168:443 apple-finance.query.yahoo.com tcp
US 8.8.8.8:53 h3.media.apple.map.fastly.net udp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
GB 17.250.81.70:443 fmipmobile.icloud.com tcp
US 8.8.4.4:443 dns.google udp
FR 172.217.20.202:443 safebrowsing.googleapis.com tcp
US 8.8.8.8:53 itunes.apple.com udp
US 8.8.8.8:53 a1806.dscw154.akamai.net udp
NL 23.63.101.177:443 play.itunes.apple.com tcp
US 8.8.8.8:53 client-api.itunes.apple.com udp
BE 2.17.107.232:443 client-api.itunes.apple.com tcp
US 8.8.8.8:53 fmipmobile.fe2.apple-dns.net udp
GB 17.250.81.70:443 fmipmobile.fe2.apple-dns.net tcp
BE 2.17.107.202:443 a1806.dscw154.akamai.net tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.outlook.com udp
US 8.8.8.8:53 ecs.office.com udp
US 52.113.194.132:443 ecs.office.com tcp
US 52.113.194.132:443 ecs.office.com tcp
US 52.113.194.132:443 ecs.office.com tcp
US 52.113.194.132:443 ecs.office.com tcp
US 52.113.194.132:443 ecs.office.com tcp

Files

/Users/run/Library/Keychains/login.keychain-db

MD5 1a686c0f8edc943fff6adbc3bc57672c
SHA1 f2ea40d752082d8b644967bba390734c9fe7b498
SHA256 47fc1b3ea56754d256eb4797e11714e994f21a6fd2071cd10f9925f1a3378dfd
SHA512 1b9e3576bb1c6e2f86c8d853c5e3d7656d29d5e65e48310d2044f061450e472127062043e10bf5fdca9fec5dba4ba5cf1f45d9b01ede409d97d74b08e064378d

/Users/run/Library/Keychains/login.keychain-db

MD5 5a67179eea7496bf283085a4e4e0823c
SHA1 39c5f7b257029483cca98e20629fdfdb6b8b9ac7
SHA256 9e7eaf2a6a2b431b12952f4f24f7cf800c127ad910474561483bb12908c851a6
SHA512 6ffd9a7c8893a2d63cf1e25ef31c4fa767cd7fc99391eca906179f800522f6e061d16690f072a00087c165147a9bfadb519392625490def80ba2ac77d0c53f87

/Users/run/Library/Keychains/login.keychain-db

MD5 8eac05994112004a5f6a4dcedf3ec715
SHA1 9aad81b214bcd4f4f99103cf4c831f4c89515c4c
SHA256 ce4969c4a876286a049c39e8bc32ad89dfc16dd19c64f4f6f4f1968bc26d0add
SHA512 a98168fb68743420f00a8b9b308008c45dd4c5623686436acfcf8abdb3a8bb91334cd891c6e2a25f4949d7a8bc415fe731102c8ff6df6e4248f6ce15006c66d5

/Users/run/Library/Keychains/login.keychain-db

MD5 944d2a4d47ced102e7e54dd146974e1b
SHA1 b8b95191347e71d6e615751e106912f7c3e12b0c
SHA256 067e5b7ebe8829321f92d91cef81e67c12c2b89a5f8bac252edbf2da090119e8
SHA512 ac7d77ab2b2d719a6099d43d6095fcaeb0995b7906defe186ee115225bd026c0fbb627981c6486101d35bf8cdaede915e72c2d5018bebebd8b2aa9fb567c5bfa

/Users/run/Library/Keychains/login.keychain-db

MD5 bee1d959375ef7623032bcc913c149d6
SHA1 5fe0742cb2f589e0de556e00ac0a3e773b0d89ce
SHA256 8dd5fdc350558df08907c4280f631e7fdf00277c993168388489051a77b089a4
SHA512 bfda8a5661693186d615938583752c1ebad356f2a5a861cae2296ecf335e25f29453fe1ad5b6fcd53ef71856720ba1f96c73b7633129076a979ec4d1a57b64d5

/var/root/Library/Application Support/Google/Chrome/Crashpad/settings.dat

MD5 c6db1caaee0095f017c09113d53ed054
SHA1 cc37e2b3948325a0eeb51080f45b17ebf52a7035
SHA256 ca3252b297284a87de2ee1688585f7c37d26b98c05d7ed04bd7d6df10c0d1476
SHA512 3013340ee4157dfef7dcacd690b840f12b876e8241d4e8bc419016d5336810ab77023cdbbeaa896544e4c29f386d21296649542ef2b0fc6b58c49e2ad0337d85

/Users/run/Library/Keychains/login.keychain-db

MD5 09428859097fc695a713247d9c9e1d4c
SHA1 e9144ccfe4b9bc0344feaf761010feec3d83752d
SHA256 c85a2da7e042d92f001dd1f6499dbb73c0763e3824bf9f78ef146f6a9f998275
SHA512 9d3432e3a19637047f45b10af10f305bdef40d7403750b370c7ed71073484b2e8d665190d4d8829fa70069df283a6ee6100d2383b9bae0f91913a002c11eed13

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db

MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db

MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

/var/root/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/000003.ldb

MD5 5c4e7ade5753ab7de2c42c04111fa42e
SHA1 fb577b8c07d9617f507a3f2950df0a6dcfebe4e2
SHA256 d3979fd2d9ecfdb05498d79d1f24998c38cfd107e321f6810d8b7f9f12affd82
SHA512 7a7452bcd22e66190e36ff0036f21d854fa57bdcbaebf637aa3a6d932a385a7c90525ede0c124853c218445d583c0edcf45d12159ca452732f31d16c3901929b

/var/root/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/000003.ldb

MD5 fe382e791274914bee5950777e4f1fd3
SHA1 53b523b5fc87e66f2520a0b5f9ea080072668f4d
SHA256 935d36c021d0e08a5648c622f3f6fde376e3310013680ae598c0e22dc943d132
SHA512 a5f608fb4f0a1dbc4c5d1b739b1a5b6f50cac1d6a61312b19abf9f601882a291d73524ac55bbe183e4e64db8dcc203d4bf3cedc734fd04bd448cb825d98d1e67

/var/root/Library/Application Support/Google/Chrome/Default/Extension Scripts/CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

/var/root/Library/Application Support/Google/Chrome/Default/Extension Scripts/MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

/var/root/Library/Application Support/Google/Chrome/Default/Session Storage/000003.ldb

MD5 38fc535a8f11d7e955ef58cc63158eff
SHA1 c45ad3ee106dbfb65dce7c09b53140f34454cd0e
SHA256 085c44dfa11e65ac3548c4d0fe1ae641570f90c7caaa2881c3990efcf555e6a8
SHA512 26e70000f77c1b6388dd470f9d7ec6bedc4fc3c43e48efcc853812eb076108bcdd9f50f7a89265e431d33df96e71755ca242dfd0aac16a51d99dea50a5a1e505

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.z1yx75

MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000003.ldb

MD5 17a2dc5826aeb539547f00f52eccccd5
SHA1 fd36ad6db84312792cffac0267f6329b21727d66
SHA256 746da9cf33c3e4d29907dfdf1065f06ae16dcb5c2e9a34cfb5dd0dae9130f151
SHA512 6bca3e308d0446211570021c1f1dc6d8e9704a2a68a90c5c8daf26b20cb2702bccfae8ddfeb6f16c8bfea83e1b648810054a25a7967bb9539feb241f2950ea73

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/000003.ldb

MD5 ea517aa120c972c602673d331dfa35bc
SHA1 7ff539eec544cf306b80137bc182fb544e58aad5
SHA256 0c53b2ef8ec9bd6c3b81955b45cd9fc69705e7b435ad747b50c150c7e341f8da
SHA512 e2bc6f26b0db61af3b7f1648e890be2b748aa886ff3ab51e207a915432c6d9a426b188fe9c979b443e8fe8aad248442b20b2e6cd38f494264cb7cdbcaa88eecd

/private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/scoped_dirgzrQE0/CRX_INSTALL/manifest.json

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/scoped_dirgzrQE0/CRX_INSTALL/images/icon_128.png

MD5 30899b6c4e4a757b8ec6dd2208acdfb4
SHA1 f2c5880a724c6d75cce1b5191e0d82c3bc7de768
SHA256 4f17efbd974a41d88cb36567aab6bf4586579e78780f00b1826676819e14bff4
SHA512 58539e3f0ad7fef30792efcdbbd955599e11e4261c9946e7c3dff6267e01747354ea3b901c46fc8329f81c68afbeb2d05fe3fcb266bc5948de8befa5b8d040ee

/private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/scoped_dirgzrQE0/CRX_INSTALL/images/icon_16.png

MD5 344554d96e418120bd80ef5de5194697
SHA1 23e141c3a6ce368acc1c299f062ab85914bcb17e
SHA256 0a4bd08db6422f8e7a8a218ef39c1b99a5a675f12697f26be88f9afc2e1f9378
SHA512 7ae38853e5acca479d7fd81d48bb88c671cf4dce63342209bcff045ac581a04b7b0ed48f6c58253db950935c0522caaa4fbc6cf5a25151a8960ba56fc804569e

/var/db/locationd/Library/Caches/GeoServices/Resources/altitude-1285.xml

MD5 9a43af57707d2fb460832049d1f217d1
SHA1 056d813f8cb5198ca82072f7e3484f38ea5267f8
SHA256 7224f8828694ed74a8353567e4d84da188d15a993a4a75938f8409cb49218e7c
SHA512 1f33175f5d0958c79540a627552f71c6960b6ff19c9b2b0aa604c00bfeff216f6ea2ec3a22ef91ad8d7249597fdf5ad49ddbf5f4aef71b397e785152474954d7

/Users/run/Library/Caches/GeoServices/ActiveTileGroup.pbd

MD5 9ace3df1a71efad5f1388151119ec598
SHA1 836dc6d5478ad123b07b7621597312dbea329a73
SHA256 3114d66e13657b66bfdd1e559a624af86a623bb97cf41dc84a774b39f53a12f4
SHA512 4192e231977c172fb9dac29ff58ce2f75e792d5c1032aeccf11e1ecddfd6fb9c0689449b7a5fedce8d3e39df374f06c9703b7b6f306e22b2b1bcff6398611be7

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.kpLJuC/lmelglejhemejginpboagddgdfbepgmp_449_all_ZZ_gyquc4lvsd3lincjw6kblirobq.crx3

MD5 556134b3869539491e28c6eecb84cbe4
SHA1 19e9ebc5a6778a01dd75fad5738a20ecfeca08ab
SHA256 3e6a99367b6b37be5ad828dac3f4612241ac241264ca3955b108ff8b9333b5d3
SHA512 c2cf30bef68fb6077dd30f7c66afac49a7efabc39330c5c33f7c29a5abdbfa5c2253d94a506168de95aaea7b9df7b28cc6854626347a5991b159b59b7e8811f7

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.zlduUi/7_all_sslErrorAssistant.crx3

MD5 636c653ec2c30bb767533901a18669b2
SHA1 4b5a01cfea4c5deb62f3aafa01ef24265613b844
SHA256 3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
SHA512 a4128fb20a5df9e573e92b45f5bc18dcdf4be6e7e39172d08847882f17361320141e89b35deef337e40c365d6f1ccdd1b991eb4593d805dfa2e39a5257c335ee

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.QC6mhY/khaoiebndkojlmppeemjhbpbandiljpe_65_mac_dzlxuetwsybdv7gfmhikquhdj4.crx3

MD5 f5ed8ad664370de2d16265ac99085dbc
SHA1 52deeff97bc4c2777b70b7d79bedeae161183150
SHA256 9fe1922c50cef6ab1c62d9b37a37e0a7d6e82639217b4b7fb1537183ae0dbf55
SHA512 d0ee804f80dbb6a6a9a5e6165829f840761526782933997b73e22fcda452be6a2b4025c51e22c7980d5a49b985d26b70a2d1f4e5d40f5863712103c1c50e67c7

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.fHfvkK/hfnkpimlhhgieaddgfemjhofmfblmnib_8827_all_ith7lfxmi34whgowbxkylqlmoe.crx3

MD5 f8f19181dc66b4900e976004b1366662
SHA1 efb80c5db51c9d411bd0de95563c30aa68e91c78
SHA256 0d7a409128bd2a71effe450d0fe28845102e102148dc52942e81bd4943dacaa7
SHA512 de51136c6678e0116875ddde0ceb98098580ff25898a7921723c34882e1e9bab1e63ba33b02b7c646744929238d2635cd815e56b31829592cd4b3054636dcf43

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.Gg80jc/1.0.0.15_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

MD5 39fbc1bf4c6c8f919181e3e72630f974
SHA1 b73f2394a2c1ac341df75ba63eef4e5e9830fade
SHA256 3a118962ef814c91f6476bb9f0de58afa63103af6ac1b8729be9b39a86789e96
SHA512 2dbd8f772bc113f6500dace5d187b12c79e6e3a5c7f6f68d270beebc482334a1970499b28de5187a3619ff3ecd20aab10c31df8433d509dc011e1e88978ab70e

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.d0kYAE/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.49.1_all_ixzyrcu7pvmgu5pjv6enfqq6wa.crx3

MD5 2db7e78c310ca8e73c069a604eac4d99
SHA1 a6d1e03514f8eba03ab81f1380fc54aaded823b6
SHA256 cd1978742a4afdbaaa15bf712d5c90bef4144caa99024df98f6a9ad58043ae85
SHA512 681eaddbf304f4513b008b98493272b44815460568876b93528851ff7806775de38e6ec588fe27a2cf3dc804415e83a420e45d754b25ad4bdf68ef2c78403aa3

/var/root/Library/Application Support/Google/Chrome/Subresource Filter/Unindexed Rules/9.49.1/Filtering Rules

MD5 6274a7426421914c19502cbe0fe28ca0
SHA1 e4d1c702ca1b5497a3abcdd9495a5d0758f19ffc
SHA256 ae2fd01d2908591e0f39343a5b4a78baa8e7d6cac9d78ba79c502fe0a15ce3ee
SHA512 bf1287f502013308cdd906f6e42998c422ef1e272b348e66122dc4a4e471d01333b418f48d1bb2198c72845bdc950612597e179e612aaa1ba6cf8d48fb8f0cf5

/var/root/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.49.1/Ruleset Data

MD5 c5e30274fe7b93847f6d7c02410d1209
SHA1 488a49f38459f29e110c706c51b61ca1ae3b0e26
SHA256 e634e3cfdd0d27d0be1f5f9a19748d19d564928765db343503f42a6e1f5dd4ea
SHA512 bc235bb3af269e9a828e6788dbae2b42cabc879b858102f4cc76c0fa02af0e296d20ffc8f134c0a3f9b408643e4810e8c46afeb0c285b892908b06ea1aa1b811

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.Dh5j59/jflookgnkcckhobaglndicnbbgbonegd_3030_all_gxlhecuj7wt4iru2mmpk5afmoq.crx3

MD5 b173dbd5ca315b732be8248161124804
SHA1 0083e57ea026113275009cb9cd111bd211578e17
SHA256 888ebbd183d017421d0f23a0a1ea9eaedffefd772878d86c67536c138ef62ada
SHA512 d4cb2a881e157a6d71fd5afc0c1fe0cb343de0ff019ab8778bfcbcd731a2fb8e28336986c603a3e354d9889e2adb68ba6a40fe7df0cc1fa5832bc000ef1624e5

/var/root/Library/Application Support/Google/Chrome/Default/Sessions/Tabs_13362364214878821

MD5 5ee7a16e285dd6725a171c21f175c83f
SHA1 286a75965a1a7a0951a13838c5e84abcd7628493
SHA256 a48df4b0b2aab324e97642945df901dbb962fa5e5c5b6ec9f1256532a9399158
SHA512 74687ea9643ef51a2cbe527b2f62550d8676bc6a46ac48db2791ca32fb56b7f83246151f27929db6556b165d1ae1d0e98ac81fa80df1ab59df6984119e62f5d6

/var/root/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

/var/root/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/MANIFEST-000002

MD5 02fd7b4be9b3ff4ca905e896e3f7455c
SHA1 8f75a85f9fb422bdcca0d75d94b04cb646c40b84
SHA256 6386c309bda81af8937ba94c257fb3c7ae94b1f9b1b963d05580587d256ab540
SHA512 c4e0aea72409222201261a702691fc01743fc88d18926b6d6d804376b2516ec73c15894d91c3717d5154faeec8edfd4ccbe29ad91154fe1973a376df077c8d5b

/var/root/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/MANIFEST-000002

MD5 3a57544d01fe9674d498821a952e3d36
SHA1 3f201cd409b973af8500876ca38f87ca0d6c9189
SHA256 fd8e720fc1456f55e072b36bef305d5a5d8b48371a4b9782707d9b28b46fd958
SHA512 94411d68add2de6c874830227985c1826afeaf627d63563d630ba19f0c1198983cab6257e186e584fada32e8b8b314650b3adf97a26140753249fba3de227c59

/var/root/Library/Application Support/Google/Chrome/Default/Local Storage/leveldb/MANIFEST-000002

MD5 64486e4c658733375b5b98eb7dca49ff
SHA1 fcae1102348cbab75e16c45901c9ee9974a87bc3
SHA256 d420b162415ff7ed4b23da14cee4ffc3e89b288951ab5efe8965266367d6b370
SHA512 a216f7a9508c011889b6859f377d7e4ba6a3dba794a04206c759d7a41910b73c87bf62db0ad71054d33ad3375d7db005521c9851e3ee8f32f6388a586f78a3bf

/var/root/Library/Application Support/Google/Chrome/Default/Sessions/Session_13362364212979037

MD5 ff6ef0b981b770f34a657b7b7a70432f
SHA1 a77c80b39f88aef624a2400ae722d17e1b301a91
SHA256 c05b0abd0209c33b0e88273bef69d935179113af792765df7f322809c677bc0f
SHA512 f9c78f772366f9c735a054e1419b2dcd4a38973d680c60f730407310f751ae0a97712cf55ceb61ae9f9bb83ca224493182409e76138869cb303d4c1ae70ea1d0

/var/root/Library/Application Support/Google/Chrome/Default/Extension State/000004.log

MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/MANIFEST-000002

MD5 815f2fed6f3179803b326b6843de144c
SHA1 02875c5984591b29f67646bb663a145ce4256cf4
SHA256 8973bafa39975ca6a092a20a00b8adf2803efebf23fe735ade013cdb22dffd4a
SHA512 1c69705f60b4b4456d9dd3713c8763bc825ebfe9b7a2f6eb463d4893fe21cb12162300dae737c3eadfbcf5700a102c09aa98344236755f4019527be3812d7556

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000004.log

MD5 654fc54f6b2dd37fb111a9a928462732
SHA1 d128b4a130bc666097dc92f547763d88a4f9bd03
SHA256 e5c80fbab7fe3c6b18b8d937f3ae3ecded9492ce7a626598a4a05f1b9220673c
SHA512 640dfd4a9f06aa35a8d9710841783a55b285cf6e7f2d08a1d87c7bb1966ae0d5d6a50e952eb8d0c66a0d49c929514f4e37e9bb76e8c56abe4e5780ecc6d44086

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000006.ldb

MD5 a737278605658a7d58ab7569a7de80f3
SHA1 46a939b088a1bff438c677a631660874d0b21f1f
SHA256 0f65b66a94e503560f29e9aef760fb665191aeca8b6b7ccdfa79291caf414ee9
SHA512 08f0b7f02894856411a8a7055d4fdab51581ac5c5733c010b133c5d4efced5e32dd51cc796fa09f4207ae1f99e53abab388d462fc2efa4e5ce4c38366dc6ec70

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/MANIFEST-000002

MD5 d618bd44784222603fb1475ba6d1ab6b
SHA1 1955c4424db6b1e02c2d535e6105d95819d3e5c9
SHA256 55de269dd56f291aab10eb93ab216cd13c285d4542723bf06fdba96bd88561e5
SHA512 220c4fbaf743dbed8242472ca967c74b0448725ca772d0282a7347394c721cb7e28007dd3f4f890b2983a4caa2e632c57d1706d1718567419762ae90f3778367

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/000004.log

MD5 c801fdcd8a51995fb04db1627d1fdea5
SHA1 212f9a1cc3f242bd8a2859315ef6d2af7ce65f07
SHA256 fec69d60979d7d8ef404d4fc42c8f1d75cd864777409fdfd5675826e8bcdc936
SHA512 8a4f9f8fc0baec1b0768274127de36662917ea72041236c9f71e66be24f804552fd9b063428656939872e53b066e3f02b87d088431a5e4118fe7e677f3c9ca33

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/000006.ldb

MD5 ff947be3fa69531ab54c3562b1682969
SHA1 e98d607c60418cc5419bed5e5d30953054206d4b
SHA256 88e6a45f803e4064600c3fde3991dcb8de5042ab313146562bd7a42c3ae726e5
SHA512 a667b06f862bbeb830437376dcd89d52bb0e69ccd7b70f3f5479246a95d86e5d138de26da31e317113df20124a150f9d9bc52227c61d05693c8285ccdd910075

/var/root/Library/Caches/Google/Chrome/Default/Cache/Cache_Data/index-dir/the-real-index

MD5 05661a4d920aa6f4f1b12ccb9d484325
SHA1 357bd7cd99426dc5bb874227c4470dbcf79baf06
SHA256 25d42ac5bd2af55e2741fc608942c2165e81819c34e367f78dd20fb93a26aebe
SHA512 cc05393719502938b577f329ee5b7b781a5053516f061888c8879b85acb4a3e4f9f761880fba70075edcc2308d0b42d6476efa8d9507c3619399f29e25becfd7

/Library/Application Support/com.apple.icloud.searchpartyd/savedConfiguration.plist

MD5 d8858841b3415b0e7ce869c9ff94cc6c
SHA1 2d384b197673e24d84270c4b1f5b998a2f5cc671
SHA256 bff60d1818d3c635d8e844c7eb59b4bc45ee3563320ba8c278a064aa3ae5d64c
SHA512 5165384c11f49c318eebd43c59205af9059f81789017712a279b55294007fa072c8a04f14f60bb613d6650f4c6ab0ecceb0b6a78f5c86e4c13e3b277f3bb3a81

/Users/run/Library/Caches/GeoServices/Resources/LocalizationStyleAttributes-8.plist

MD5 d7aa7d53d68fd2f1ac03fc79dac41482
SHA1 dd0e8f57cfe73e0dd6738e9369d3e9ed1f64d8fa
SHA256 fa9f615b095101a65a744e353217f5ca7be7ed1bf908475f49efee6867cdfb53
SHA512 bd7e9d315546601c498182cdddf440cc64b1cee4dad6a2b389188e53f932ec8a068cf3fbdb822329ad12b4f30c8aa4fb294dc75243bdb9bc1a4979348c515525

/Users/run/Library/Caches/GeoServices/Resources/[email protected]

MD5 9324f60e772b0e127ed4c223be34eec7
SHA1 c811c0efb2654f1b383cb52082c797c2edf2d89d
SHA256 f55c5713b4e36ccd513baa44fdffd51a8e598efcb75db3bb6cdf11ed610b1e8b
SHA512 0e1819049b87c1e2e2778f4ec254fd60a9fac6f8742bc9aaa6a4d81166a9b763403d9fcb0629b296e4b1e4add1d0967608d9d206161e25b5463eb020f5d66e5d

/Users/run/Library/Caches/GeoServices/Resources/[email protected]

MD5 cd63684458d51facddaf5be32e1f0400
SHA1 dd1ab85b7cc396a0b2ff5b97b04800ee9ffebefd
SHA256 cfbdef9d1635d62a21c70d893e962ae334c5cad28b682422932a94f63da7b0a9
SHA512 5755bd36a6bf684f0f95fb9d398360b2cf8adcc00f4edb44dba28e5ad4c2fe0c01c7e3db54ebc3cbac021d0b76e5992b966a32407f4ac49904d26c51b83a4d35

/Users/run/Library/Caches/GeoServices/Resources/default-iosmac-6364.styl

MD5 a639adaa781300bae5806b87a60630f4
SHA1 9e8cd3ec68482004e12e35e0ee0971eee371fa46
SHA256 6a9a65c35e067931fbed99adcd77af62f1dc2e3b8cd3dee6cf18fa356c73e23b
SHA512 f5eca9374f24865da39003d8ed8014d681cc419b38f8e07086166e51d52f339d0958fbbf9688f66bdcd27c9586c9cc80a23bb3be0c50b46c1a9dd6170f347223

/Users/run/Library/Containers/com.apple.Maps/Data/Library/Maps/GeoBookmarks.plist

MD5 44d48b8856347f58f97ffd5efbf6fb52
SHA1 749ac5298ea842c613f3748abe9e488bfdf4b382
SHA256 cd3a65a738c66abb558545cea94329fd7d882f1f4877cea4a5af32d024dbbce3
SHA512 974fc97ed31ccbc19dc976128a41f1fa032e353fdb8cf1e9b7b7f07134c022e01451f7ceb07f91b0ac4b6d97bc320224a2edd471d3e44f5ab5359f41584a8a50

/Users/run/Library/Containers/com.apple.Maps/Data/Library/Maps/GeoHistory.mapsdata

MD5 e32332952b2ccee296093224aea5acf9
SHA1 c0418197668954a7baa345478971e86b9ae132b0
SHA256 3c247e22168f7bd24cff896e8b9200d3c4f3229d4a15f5353c4c61483dabfd52
SHA512 089266dd43d52eef5fc38f15e217b3c9d7dae317757cbbfee9d0f21fb2264753de8c9b9c55736113d8e2a560c7d29a9d8ce5f13af742af380d4ccd717a04f5ec

/Users/run/Library/Caches/GeoServices/Resources/default-41715.styl

MD5 ef1e29b9958ec8e71ae229d38d511e1e
SHA1 4028e16745f4e970b77508b2410f0b2069bd1789
SHA256 22bfb8eb4a2327c57e092fd0835a703710d4aa2345004ebac8912afc10f14001
SHA512 f61650d723b86c5e8abf06d750b5016d4d2296e77014f861b96e0e34b3cb485419967ef8ca3b7caa03c2d2c916d921d542204e59388947b7086c1db32e445a60

/Users/run/Library/Application Support/com.apple.kvs/ChangeTokens/com.apple.cmfsyncagent

MD5 587c6a45ff47cab70034e009d105967a
SHA1 de62d9e05136e893a9234e41302939300bfadbd6
SHA256 5c1d8f4896a3df9ac1ed4d511e210aeeb8f2f04aec0b33ddd76a44c43dd6c4c5
SHA512 f886347d86c22ad592ec5658b744f881601e42104d59f9b0180b827dfb7c47e529594fdc29299b591ac2d6a5362c42b0164cc1a6f138a4ecb3db15390adb528e

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.colorsync.profiles.502

MD5 745e1de611dfc9da4bcebf665d6180dc
SHA1 cecdaffced9cb9cb6c5a53e1b731207ce594f0a6
SHA256 559c54c627d14b376a3da103a676cf5552af5f97ef6ea6c16bdb053ac7d5d6ac
SHA512 5ee56918b58e114e48c8233f5a773c3da4bbbad4e6f0b63c51f094142934e5bba89b50ef502d768d7d3142e0af29359e34a10c627fe0ad14799230709a7a92df

/private/var/db//keybags/persona.kb

MD5 b267741fe4d37ab14544c41f804710c6
SHA1 a293cb14d1dec1c00e4c05ab127971dcae71e4d2
SHA256 3caeb03745d5ee768bcb14c837009349366fbf4a20329e349c00e38bcbfc65de
SHA512 69205c8f0fc4f1261b399d7f2771ca626aedd01ab69f0ec01a79ce86e354582582fac1e906fc4e630602b8a3d1191d9aa224285884e18f9d2d779c640ea8ffbc

/Users/run/Library/Caches/com.apple.nsservicescache.plist

MD5 da458c8ae2a843d425b1ed496d726c8f
SHA1 5059a316e9e0edaffdee22bdc9f19e86b94eb50c
SHA256 560f6848ce082dd5bdb68fc7230ba176a5faacaf3b5d834354e01085297e5180
SHA512 70571b44975fb44ddc8362909c7bcbeb49eb1afad6afa0da45d7f25e1e3d168de4926f488abb7ab9801296401da086cc80f11cfe927a261d5c8c0b59e641d967

/var/root/Library/Application Support/Google/RLZ/RlzStore.plist

MD5 2de6a04cdba79ed13580c47dfd70cc5f
SHA1 bcefe0558555914d731c16b1778c49e77fe06b99
SHA256 97704a8960b4facceef54397a08fb5d0a456247c3627359215aa2a27df22656c
SHA512 605dc81b28c530fc8ebcf3c5a28486af8bbd3303ee5df53b5424e492e5dbe01baa0468fa4da1398451a62dff4d45067a2bf765f7def9ca0890883484de38a13b

/var/root/Library/Application Support/Google/Chrome/Default/Download Service/Files/Unconfirmed 420916.crdownload

MD5 5adf364735dcbe6bf26ebe3f705c9dbc
SHA1 a891521fea2f61a2fd16ea9f0a3fc3c2c5fb3a46
SHA256 8d21fe1bd251856bfaeaedd6a72ab78f153a047b6042e0fc614f57a32b56d340
SHA512 5f77f8923ab3800ab754f4c60095077b529c5f5f230c6a0b6803dc28597f42ed682921267ed344e190d0f08e0a23eceace7bccbc9d22432029a3e6f4838420e0

/Users/run/Library/Containers/com.apple.stocks/Data/Library/Caches/remote-configuration

MD5 4c28f7b3098c4d6ca364d845530bcb63
SHA1 a5ba63e5451ec598b05dc09d1a0aea6c8eb3ec4a
SHA256 f5333b3e4e29410754f4ef04b56f79d29d2647ae9cccd7dc5e283c112eb73f4e
SHA512 d70a15cef8ff07aeaaf82e901db590b5a6977e21425a0b4718c55190cc34376a1377159b1ade07c690e19f4ca05195ad9b3dd9564984ff63b45af0f8d3ecb741

/private/var/db//keybags/persona.kb

MD5 2b01cfcf35f22107bafd040bb8360742
SHA1 68ace6b0f43b2b591bc5a9d664e8d1e2bb912333
SHA256 9de640280a51a238df5dcd94440c74108d2e9f4a6916baedf0027633a35482be
SHA512 face3c0133083fc2b22eda9c1c76c6dac204926f5eb8760f87f6ff77247adabb7fdf9898924614f7b167e2f6ab49c8458d40b0082d4f7f2e39161e8124d998bc

/var/root/Library/Application Support/Google/Chrome/OptimizationGuidePredictionModels/aa1af149-dd2a-49a2-aa1f-a08231221ab3/model.tflite

MD5 6d7c2f9e94664539dec99b3233301b01
SHA1 85812b004742cc1c211c92911131ce270f8ba769
SHA256 a0956386dc64fd9f4883c8741f950cd60a56859616b159c9e4251c9eb0ac5534
SHA512 4d06917f30651c3bf13c509aae79793b3f1ec93de12179464b18fd9fd16c7bf466884b1c70e425d7e937adde341cf24bd08f19a132bbb9683e804f29b4ed0c33

/private/var/db//keybags/persona.kb

MD5 1d7453ea72e06d1752af0a787274884e
SHA1 c23d2609ecf6c0ad9022f6f44b7c63a8ec03cbff
SHA256 b24ee8ba3d0466078852905bbcaf948d93fab3fb8deeb9d29c8d4d2f2bd891ae
SHA512 a019d178b87bb3416c39fc0e5a42a16c523290645f7c60415b652cb852667ee523777e0b978a280a1b09d517b6275037f4136a62ceb229a8b430545cef4f7dd4

/Users/run/Library/Group Containers/group.com.apple.stocks-news/Library/Caches/com.apple.news.public-com.apple.news.private-production/issue-history

MD5 2a0830bcecea62bb85bf35d61fa49c0c
SHA1 efb48d83c2156091349a56552d71a99ea1b12f8a
SHA256 fbaaa8b5e0eb8babe657530c2e74f63ac6c8eb4e423ffa8e6da748398e6ded51
SHA512 e585b16afa0b1127bced0a7a34a38a421fad5245ccc04a809ccc8fc4641cc591e13bc5cfd2731617906ca0793115f5ce8c768f433f2cfaec0c0be983930201df

/private/var/db//keybags/persona.kb

MD5 953b7ab2ea665b2de48d8342608af5eb
SHA1 4e65945e1ad7e5647aec0b99805e13d83d3f23a7
SHA256 96bfe5315554a6c31c8a28e2da06f8de13c2cbacb524d6c41072da33272b3199
SHA512 7d2dae6c20213ad5d6d878d37d74f4b97686d7e9e574c4fc69e564fd27db28a0e7c08a08ff1b1d8993eb41a61c1fd057c745854e62bf1c60ddf4664c16914663

/private/var/db//keybags/persona.kb

MD5 79afc55f6f292f39f9b0baaa38368125
SHA1 c8d2bfe390670dd787774ca4a7ac48548fcedbb7
SHA256 e4d29ca002a9475a31204f3a56d03b4f0f01c8c8df17a329cfeec01e209fd1cc
SHA512 6f23f41c39dc8952ddf03f5b9e85b1147407d30929b19ed042bc05a309df1f60ae3323fd91b60106c02c73ef3a25fc6a0f5765a78146a716a5548f4301ce7f2f

/Users/run/Library/Caches/com.apple.nsservicescache.plist

MD5 8f6ab0c64c9fdd5ab1db88e0984993d3
SHA1 34221946cd029a2c5083210418b87cad41e846a5
SHA256 8ceab48b33a8a8347dd31c7dc69f7b690a3ea129904d37b9f60d232b9dc8a28f
SHA512 aac2f84626e9a2c7d0a8f466fb2b980c9f8e6b0fec592e3919e6492493faf2e26683df5d5ed073838feef2995757d33f16cc15ca31ca4132f182a4764e80df36