Malware Analysis Report

2024-10-10 07:30

Sample ID 240615-z6rlwayelm
Target WinLocker.exe.exe
SHA256 4b168048b2b5ab19a73de1c6a3a970db65a3867f255f594be5373bfd7d1a5d93
Tags
upx discovery evasion
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

4b168048b2b5ab19a73de1c6a3a970db65a3867f255f594be5373bfd7d1a5d93

Threat Level: Likely malicious

The file WinLocker.exe.exe was found to be: Likely malicious.

Malicious Activity Summary

upx discovery evasion

Identifies hardware specifics through system_profiler

Path Permission

UPX packed file

Gatekeeper Bypass

File Deletion

File and Directory Discovery.

Resource Forking

Unsigned PE

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-15 21:20

Signatures

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-15 21:20

Reported

2024-06-15 21:51

Platform

macos-20240611-en

Max time kernel

1792s

Max time network

1799s

Command Line

[sh -c sudo /bin/zsh -c "/Users/run/WinLocker.exe"]

Signatures

Identifies hardware specifics through system_profiler

Description Indicator Process Target
N/A /usr/sbin/system_profiler -json SPHardwareDataType -detailLevel mini N/A N/A

Path Permission

evasion

Gatekeeper Bypass

evasion

File Deletion

evasion

File and Directory Discovery.

discovery
Description Indicator Process Target
N/A basename "/Volumes/Google Chrome/.keystone_install" N/A N/A
N/A defaults read "/Applications/Google Chrome.app/Contents/Info" CrProductDirName N/A N/A
N/A dirname "/Library/Google/Google Chrome Brand.plist" N/A N/A

Resource Forking

evasion
Description Indicator Process Target
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk5s1 removable readonly N/A N/A
N/A /System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool N/A N/A
N/A /System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd N/A N/A
N/A /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system N/A N/A
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk4s2 N/A N/A
N/A "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" N/A N/A
N/A /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded N/A N/A
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk5s1 N/A N/A
N/A /System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent N/A N/A
N/A /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy N/A N/A
N/A /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy N/A N/A
N/A /System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd N/A N/A
N/A /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 2ECCDF21-3472-4C78-83BA-CED324B4B4F1 -post-exec 4 N/A N/A
N/A /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid DA0B565E-E679-43E5-92A6-FD1D1134BBCC -post-exec 4 N/A N/A
N/A "/System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent" DA0B565E-E679-43E5-92A6-FD1D1134BBCC N/A N/A
N/A /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd N/A N/A
N/A /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy N/A N/A
N/A /System/Library/PrivateFrameworks/CoreCDP.framework/Versions/A/Resources/cdpd N/A N/A
N/A /System/Library/PrivateFrameworks/SystemAdministration.framework/Resources/activateSettings N/A N/A
N/A /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 2ECCDF21-3472-4C78-83BA-CED324B4B4F1 N/A N/A
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk4s2 removable readonly N/A N/A
N/A /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system N/A N/A
N/A /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid DA0B565E-E679-43E5-92A6-FD1D1134BBCC N/A N/A
N/A /System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool N/A N/A
N/A /System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck N/A N/A
N/A /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd N/A N/A
N/A /System/Library/PrivateFrameworks/CoreDuetContext.framework/Resources/ContextStoreAgent N/A N/A
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk4s2 N/A N/A
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk4s2 removable readonly N/A N/A
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk4s2 N/A N/A
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk4s2 N/A N/A
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk5s1 N/A N/A
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk5s1 removable readonly N/A N/A
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk5s1 N/A N/A
N/A /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd N/A N/A
N/A /usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist N/A N/A
N/A /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system N/A N/A
N/A /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy N/A N/A
N/A /System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref N/A N/A
N/A /System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool N/A N/A
N/A /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy N/A N/A
N/A /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk5s1 N/A N/A

Processes

/bin/sh

[sh -c sudo /bin/zsh -c "/Users/run/WinLocker.exe"]

/bin/bash

[sh -c sudo /bin/zsh -c "/Users/run/WinLocker.exe"]

/usr/bin/sudo

[sudo /bin/zsh -c /Users/run/WinLocker.exe]

/bin/zsh

[/bin/zsh -c /Users/run/WinLocker.exe]

/Users/run/WinLocker.exe

[/Users/run/WinLocker.exe]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pluginkit.pkd]

/usr/libexec/pkd

[/usr/libexec/pkd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sysmond]

/usr/libexec/sysmond

[/usr/libexec/sysmond]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.cloudkeychainproxy3]

/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy

[/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy]

/usr/bin/pluginkit

[/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync]

/usr/sbin/spctl

[/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdater66017B75/OneDrive.app]

/usr/libexec/xpcproxy

[xpcproxy com.google.Chrome.3056]

/Applications/Google Chrome.app/Contents/MacOS/Google Chrome

[/Applications/Google Chrome.app/Contents/MacOS/Google Chrome]

/usr/libexec/xpcproxy

[xpcproxy com.apple.GameController.gamecontrollerd]

/usr/libexec/gamecontrollerd

[/usr/libexec/gamecontrollerd]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler --monitor-self-annotation=ptype=crashpad-handler --database=/Users/run/Library/Application Support/Google/Chrome/Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=OS X --annotation=prod=Chrome_Mac --annotation=ver=101.0.4951.54 --handshake-fd=5]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siri.context.service]

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService

[/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService]

/usr/bin/profiles

[/usr/bin/profiles status -type enrollment]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall --install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize com.google.Chrome]

/usr/bin/tar

[/usr/bin/tar -Oxjf /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz GoogleSoftwareUpdate.bundle/Contents/Info.plist]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU) --type=gpu-process --gpu-preferences=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 --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=20]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CoreLocationAgent]

/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent

[/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent

[/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=network --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=20]

/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --system]

/Users/run/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[/Users/run/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all]

/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --crash-handler --system --database=/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/Crashpad --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=127.0.6490.0 --handshake-fd=4]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=20]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts) --type=utility --utility-sub-type=mac_notifications.mojom.MacNotificationProvider --lang=en-GB --service-sandbox-type=none --message-loop-type-ui --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072]

/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake --system]

/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --crash-handler --system --database=/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/Crashpad --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=127.0.6490.0 --handshake-fd=4]

/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/Helpers/launcher

[/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/Helpers/launcher --internal]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=7 --launch-time-ticks=295514266 --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=60]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=6 --launch-time-ticks=295561964 --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=60]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin

[/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin --productid com.google.Chrome --print-tickets --store /Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore]

/usr/libexec/xpcproxy

[xpcproxy com.apple.SafariLaunchAgent]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=8 --launch-time-ticks=298814394 --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=70]

/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent

[/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=12 --launch-time-ticks=299208459 --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=70]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=10 --launch-time-ticks=299250212 --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=76]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=11 --launch-time-ticks=299682615 --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=78]

/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher

[/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump]

/usr/sbin/spindump

[/usr/sbin/spindump]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pbs]

/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[GoogleUpdater --server --service=update-internal --system]

/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --crash-handler --system --database=/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/Crashpad --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=127.0.6490.0 --handshake-fd=5]

/System/Library/CoreServices/pbs

[/System/Library/CoreServices/pbs]

/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher

[/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher]

/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[GoogleUpdater --server --service=update --system]

/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --crash-handler --system --database=/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/Crashpad --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=127.0.6490.0 --handshake-fd=5]

/usr/bin/profiles

[/usr/bin/profiles status -type enrollment]

/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[GoogleUpdater --server --service=update --system]

/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater

[/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --crash-handler --system --database=/Library/Application Support/Google/GoogleUpdater/127.0.6490.0/Crashpad --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=127.0.6490.0 --handshake-fd=5]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump_agent]

/usr/libexec/spindump_agent

[/usr/libexec/spindump_agent]

/usr/sbin/system_profiler

[/usr/sbin/system_profiler SPConfigurationProfileDataType -detailLevel mini -timeout 15 -xml]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin

[/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin -P com.google.Chrome --delete --store /Users/run/Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=13 --launch-time-ticks=318058348 --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=96]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=96]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=96]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=114]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=110]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=112]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tailspind]

/usr/libexec/tailspind

[/usr/libexec/tailspind]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=110]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=21 --launch-time-ticks=323496973 --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=118]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportCrash.Root]

/System/Library/CoreServices/ReportCrash

[/System/Library/CoreServices/ReportCrash daemon]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportMemoryException]

/usr/libexec/ReportMemoryException

[/usr/libexec/ReportMemoryException]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=22 --launch-time-ticks=331984588 --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=128]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportCrash]

/System/Library/CoreServices/ReportCrash

[/System/Library/CoreServices/ReportCrash agent]

/bin/sh

[sh -c /usr/sbin/kextstat]

/bin/bash

[sh -c /usr/sbin/kextstat]

/usr/sbin/kextstat

[/usr/sbin/kextstat]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.PerformanceAnalysis.animationperfd]

/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd

[/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=72]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=72]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=74]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=115]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=115]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=115]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=96]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=105]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=96]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=32 --launch-time-ticks=367496238 --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=105]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=105]

/usr/libexec/xpcproxy

[xpcproxy com.apple.bird]

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird

[/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=118]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=120]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=118]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=118]

/usr/bin/hdiutil

[/usr/bin/hdiutil attach /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.3oUb6J/GoogleChrome-125.0.6422.142.dmg -plist -nobrowse -readonly]

/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper

[/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 2ECCDF21-3472-4C78-83BA-CED324B4B4F1]

/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper

[/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid 2ECCDF21-3472-4C78-83BA-CED324B4B4F1 -post-exec 4]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=chrome.mojom.FileUtilService --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=105]

/usr/libexec/xpcproxy

[xpcproxy com.apple.xpc.launchd.oneshot.0x10000001.DiskImageMounter]

/System/Library/CoreServices/DiskImageMounter.app/Contents/MacOS/DiskImageMounter

[/System/Library/CoreServices/DiskImageMounter.app/Contents/MacOS/DiskImageMounter -psn_0_196656]

/usr/libexec/xpcproxy

[xpcproxy com.apple.XprotectFramework.AnalysisService 561]

/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService

[/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService]

/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper

[/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid DA0B565E-E679-43E5-92A6-FD1D1134BBCC]

/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper

[/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid DA0B565E-E679-43E5-92A6-FD1D1134BBCC -post-exec 4]

/System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent

[/System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent DA0B565E-E679-43E5-92A6-FD1D1134BBCC]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputMenuAgent]

/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent

[/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputSwitcher]

/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher

[/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk4s2 removable readonly]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk4s2]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk4s2]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk4s2 removable readonly]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk4s2]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk4s2]

/sbin/mount

[/sbin/mount -t hfs -o -u=99,-g=99,-m=755,nodev,noowners,nosuid,rdonly,nobrowse /dev/disk4s2 /Volumes/Google Chrome]

/sbin/mount_hfs

[/sbin/mount_hfs -u 99 -g 99 -m 755 -o nodev -o noowners -o nosuid -o rdonly -o nobrowse /dev/disk4s2 /Volumes/Google Chrome]

/Volumes/Google Chrome/.keystone_install

[/Volumes/Google Chrome/.keystone_install /Volumes/Google Chrome /Applications/Google Chrome.app 101.0.4951.54]

/usr/bin/basename

[basename /Volumes/Google Chrome/.keystone_install]

/usr/bin/defaults

[defaults read /Volumes/Google Chrome/Google Chrome.app/Contents/Info CFBundleShortVersionString]

/usr/bin/defaults

[defaults read /Volumes/Google Chrome/Google Chrome.app/Contents/Info KSVersion]

/usr/bin/defaults

[defaults read /Volumes/Google Chrome/Google Chrome.app/Contents/Info KSProductID]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin

[ksadmin --ksadmin-version]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info CFBundleShortVersionString]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info KSBrandID]

/bin/mkdir

[mkdir -p /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions]

/usr/bin/rsync

[rsync --ignore-times --links --perms --recursive --times --delete-before /Volumes/Google Chrome/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/125.0.6422.142/ /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/125.0.6422.142]

/usr/libexec/xpcproxy

[xpcproxy com.apple.quicklook.satellite.9E011E3E-0A18-4012-810E-1EC42A8CFA63 683]

/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite

[/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=20]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk5s1 removable readonly]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk5s1]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk5s1]

/sbin/fsck_hfs

[/sbin/fsck_hfs -f -n /dev/disk5s1]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk5s1 removable readonly]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk5s1]

/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs

[/System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk5s1]

/sbin/mount

[/sbin/mount -t hfs -o -u=502,-g=20,-m=755,nodev,noowners,nosuid,rdonly,quarantine /dev/disk5s1 /Volumes/Telegram Desktop]

/sbin/mount_hfs

[/sbin/mount_hfs -u 502 -g 20 -m 755 -o nodev -o noowners -o nosuid -o rdonly -o quarantine /dev/disk5s1 /Volumes/Telegram Desktop]

/usr/libexec/xpcproxy

[xpcproxy com.apple.assistantd]

/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd

[/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd]

/usr/bin/rsync

[rsync --ignore-times --links --perms --recursive --times --delete-after --include=/Contents/Frameworks/Google Chrome Framework.framework/Versions/Current --exclude=/Contents/Frameworks/Google Chrome Framework.framework/Versions/* --exclude=/Contents/Versions/* /Volumes/Google Chrome/Google Chrome.app/ /Applications/Google Chrome.app]

/bin/rm

[rm -f /Applications/Google Chrome.app/.want_full_installer]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info CFBundleShortVersionString]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info KSVersion]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info KSUpdateURL]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info KSChannelID]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info CrProductDirName]

/System/Library/Frameworks/CoreServices.framework/Frameworks/LaunchServices.framework/Support/lsregister

[/System/Library/Frameworks/CoreServices.framework/Frameworks/LaunchServices.framework/Support/lsregister -f /Applications/Google Chrome.app]

/usr/bin/defaults

[defaults read /Library/Google/Google Chrome Brand KSBrandID]

/usr/bin/dirname

[dirname /Library/Google/Google Chrome Brand.plist]

/bin/mkdir

[mkdir -p /Library/Google]

/usr/bin/defaults

[defaults write /Library/Google/Google Chrome Brand KSBrandID -string GGRO]

/usr/sbin/chown

[chown root:wheel /Library/Google/Google Chrome Brand.plist]

/bin/chmod

[chmod 644 /Library/Google/Google Chrome Brand.plist]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin

[ksadmin --register --productid com.google.Chrome --version 125.0.6422.142 --xcpath /Applications/Google Chrome.app --url https://tools.google.com/service/update2 --tag universal --tag-path /Applications/Google Chrome.app/Contents/Info.plist --tag-key KSChannelID --brand-path /Library/Google/Google Chrome Brand.plist --brand-key KSBrandID --version-path /Applications/Google Chrome.app/Contents/Info.plist --version-key KSVersion]

/bin/ps

[ps -ewwo comm=]

/usr/bin/grep

[grep -Fqx /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/95.0.4638.69/]

/usr/bin/cut

[cut -c 1-108]

/usr/sbin/lsof

[lsof /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/95.0.4638.69/Google Chrome Framework]

/bin/rm

[rm -rf /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/95.0.4638.69]

/usr/sbin/chown

[chown -Rh root:wheel /Applications/Google Chrome.app]

/bin/chmod

[chmod -R a+rX,u+w,go-w /Applications/Google Chrome.app]

/usr/bin/find

[find /Applications/Google Chrome.app -type l -exec chmod -h a+rX,u+w,go-w {} +]

/bin/chmod

[chmod -h a+rX,u+w,go-w /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Default Apps /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/KeystoneRegistration /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/125.0.6422.142/Helpers/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksadmin /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Libraries /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Google Chrome Framework /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Helpers]

/usr/bin/xattr

[xattr -d -r com.apple.quarantine /Applications/Google Chrome.app]

/usr/libexec/xpcproxy

[xpcproxy com.apple.xpc.launchd.oneshot.0x10000002.Telegram]

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/AppTranslocation/15BC61A9-BE21-4920-9702-24E5CB78D1B2/d/Telegram.app/Contents/MacOS/Telegram

[/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/AppTranslocation/15BC61A9-BE21-4920-9702-24E5CB78D1B2/d/Telegram.app/Contents/MacOS/Telegram -psn_0_225335]

/usr/bin/hdiutil

[/usr/bin/hdiutil detach /Volumes/Google Chrome -force]

/bin/sh

[sh -c /usr/sbin/kextstat]

/bin/bash

[sh -c /usr/sbin/kextstat]

/usr/sbin/kextstat

[/usr/sbin/kextstat]

/sbin/umount

[/sbin/umount -f /Volumes/Google Chrome]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.DiskUnmountWatcher]

/System/Library/PrivateFrameworks/KerberosHelper/Helpers/DiskUnmountWatcher

[/System/Library/PrivateFrameworks/KerberosHelper/Helpers/DiskUnmountWatcher]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=28]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputMenuAgent]

/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent

[/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputSwitcher]

/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher

[/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=28]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=28]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=28]

/usr/libexec/xpcproxy

[xpcproxy com.apple.dmd]

/usr/libexec/dmd

[/usr/libexec/dmd]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --shared-files --field-trial-handle=1718379636,r,2379702660651733440,7028426705596105972,131072 --seatbelt-client=28]

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/AppTranslocation/15BC61A9-BE21-4920-9702-24E5CB78D1B2/d/Telegram.app/Contents/Helpers/crashpad_handler

[/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/AppTranslocation/15BC61A9-BE21-4920-9702-24E5CB78D1B2/d/Telegram.app/Contents/Helpers/crashpad_handler --database=/Users/run/Library/Application Support/Telegram Desktop/tdata/dumps --annotation=ApiId=2040 --annotation=Binary=Telegram.app --annotation=Launched=15.06.2024 21:26:02 --annotation=Platform=MacOS --annotation=UserTag=2adcf59e094524 --annotation=Version=5001007 --handshake-fd=6]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siri.context.service]

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService

[/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pbs]

/System/Library/CoreServices/pbs

[/System/Library/CoreServices/pbs]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mediaremoted]

/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted

[/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted]

/usr/sbin/system_profiler

[/usr/sbin/system_profiler -json SPHardwareDataType -detailLevel mini]

/usr/libexec/xpcproxy

[xpcproxy com.apple.icloud.findmydeviced]

/usr/libexec/findmydeviced

[/usr/libexec/findmydeviced]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CodeSigningHelper]

/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper

[/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secd]

/usr/libexec/secd

[/usr/libexec/secd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tccd]

/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd

[/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.bird]

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird

[/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sandboxd]

/usr/libexec/sandboxd

[/usr/libexec/sandboxd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.accountsd]

/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd

[/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.cloudkeychainproxy3]

/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy

[/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy]

/usr/libexec/xpcproxy

[xpcproxy com.apple.cdpd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.keychain-circle-notification]

/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification

[/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump]

/usr/sbin/spindump

[/usr/sbin/spindump]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump_agent]

/usr/libexec/spindump_agent

[/usr/libexec/spindump_agent]

/System/Library/PrivateFrameworks/CoreCDP.framework/Versions/A/Resources/cdpd

[/System/Library/PrivateFrameworks/CoreCDP.framework/Versions/A/Resources/cdpd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.knowledge-agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesagent]

/System/Library/CoreServices/iconservicesagent

[/System/Library/CoreServices/iconservicesagent]

/usr/libexec/knowledge-agent

[/usr/libexec/knowledge-agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesd]

/System/Library/CoreServices/iconservicesd

[/System/Library/CoreServices/iconservicesd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.nehelper]

/usr/libexec/nehelper

[/usr/libexec/nehelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A]

/usr/libexec/neagent

[/usr/libexec/neagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sysmond]

/usr/libexec/sysmond

[/usr/libexec/sysmond]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CodeSigningHelper]

/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper

[/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tccd.system]

/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd

[/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system]

/usr/libexec/xpcproxy

[xpcproxy com.apple.bird]

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird

[/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sandboxd]

/usr/libexec/sandboxd

[/usr/libexec/sandboxd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tailspind]

/usr/libexec/tailspind

[/usr/libexec/tailspind]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pbs]

/System/Library/CoreServices/pbs

[/System/Library/CoreServices/pbs]

/usr/libexec/xpcproxy

[xpcproxy com.apple.suggestd]

/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd

[/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tccd]

/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd

[/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secd]

/usr/libexec/secd

[/usr/libexec/secd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.nsurlstoraged]

/usr/libexec/nsurlstoraged

[/usr/libexec/nsurlstoraged]

/usr/libexec/xpcproxy

[xpcproxy com.apple.nehelper]

/usr/libexec/nehelper

[/usr/libexec/nehelper]

/System/Library/Services/AppleSpell.service/Contents/MacOS/normalizeUserDictionary

[/System/Library/Services/AppleSpell.service/Contents/MacOS/normalizeUserDictionary /Users/run/Library/Spelling/LocalDictionary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.coreduetd]

/usr/libexec/coreduetd

[/usr/libexec/coreduetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportCrash.Root]

/System/Library/CoreServices/ReportCrash

[/System/Library/CoreServices/ReportCrash daemon]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportMemoryException]

/usr/libexec/ReportMemoryException

[/usr/libexec/ReportMemoryException]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump_agent]

/usr/libexec/spindump_agent

[/usr/libexec/spindump_agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.knowledge-agent]

/usr/libexec/knowledge-agent

[/usr/libexec/knowledge-agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AddressBook.ContactsAccountsService]

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService

[/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secinitd]

/usr/libexec/secinitd

[/usr/libexec/secinitd]

/bin/sh

[sh -c /usr/sbin/kextstat]

/bin/bash

[sh -c /usr/sbin/kextstat]

/usr/sbin/kextstat

[/usr/sbin/kextstat]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siri.context.service]

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService

[/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputMenuAgent]

/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent

[/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputSwitcher]

/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher

[/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesagent]

/System/Library/CoreServices/iconservicesagent

[/System/Library/CoreServices/iconservicesagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesd]

/System/Library/CoreServices/iconservicesd

[/System/Library/CoreServices/iconservicesd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.geod]

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod

[/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod]

/usr/libexec/xpcproxy

[xpcproxy com.apple.geod]

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod

[/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secinitd]

/usr/libexec/secinitd

[/usr/libexec/secinitd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.cfprefsd.xpc.agent]

/usr/sbin/cfprefsd

[/usr/sbin/cfprefsd agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.routined]

/usr/libexec/routined

[/usr/libexec/routined LAUNCHED_BY_LAUNCHD]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Maps.mapspushd]

/System/Library/CoreServices/mapspushd

[/System/Library/CoreServices/mapspushd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.assistantd]

/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd

[/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A]

/usr/libexec/neagent

[/usr/libexec/neagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.dmd]

/usr/libexec/dmd

[/usr/libexec/dmd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.systempreferences.2140]

/System/Applications/System Preferences.app/Contents/MacOS/System Preferences

[/System/Applications/System Preferences.app/Contents/MacOS/System Preferences]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AccountProfileRemoteViewService 937]

/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService

[/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService]

/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool

[/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool]

/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool

[/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool]

/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck

[/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck]

/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref

[/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref]

/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool

[/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool]

/usr/libexec/xpcproxy

[xpcproxy com.apple.nfcd]

/usr/libexec/nfcd

[/usr/libexec/nfcd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CoreAuthentication.agent]

/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd

[/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.studentd]

/usr/libexec/studentd

[/usr/libexec/studentd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.keychain-circle-notification]

/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification

[/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.cloudkeychainproxy3]

/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy

[/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy]

/usr/libexec/xpcproxy

[xpcproxy com.apple.metadata.mdwrite]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump]

/usr/libexec/xpcproxy

[xpcproxy com.apple.helpviewer.1332]

/usr/sbin/spindump

[/usr/sbin/spindump]

/System/Library/CoreServices/HelpViewer.app/Contents/MacOS/HelpViewer

[/System/Library/CoreServices/HelpViewer.app/Contents/MacOS/HelpViewer]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tailspind]

/usr/libexec/tailspind

[/usr/libexec/tailspind]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump_agent]

/usr/libexec/spindump_agent

[/usr/libexec/spindump_agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E]

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService

[/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesagent]

/System/Library/CoreServices/iconservicesagent

[/System/Library/CoreServices/iconservicesagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesd]

/System/Library/CoreServices/iconservicesd

[/System/Library/CoreServices/iconservicesd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.keychain-circle-notification]

/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification

[/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secd]

/usr/libexec/secd

[/usr/libexec/secd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tccd]

/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd

[/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sandboxd]

/usr/libexec/sandboxd

[/usr/libexec/sandboxd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.cloudkeychainproxy3]

/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy

[/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy]

/usr/libexec/xpcproxy

[xpcproxy com.apple.bird]

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird

[/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ContextStoreAgent]

/System/Library/PrivateFrameworks/CoreDuetContext.framework/Resources/ContextStoreAgent

[/System/Library/PrivateFrameworks/CoreDuetContext.framework/Resources/ContextStoreAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ScreenTimeAgent]

/System/Library/PrivateFrameworks/ScreenTimeCore.framework/Versions/A/ScreenTimeAgent

[/System/Library/PrivateFrameworks/ScreenTimeCore.framework/Versions/A/ScreenTimeAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secinitd]

/usr/libexec/secinitd

[/usr/libexec/secinitd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.nsurlstoraged]

/usr/libexec/nsurlstoraged

[/usr/libexec/nsurlstoraged]

/usr/libexec/xpcproxy

[xpcproxy com.apple.dmd]

/usr/libexec/dmd

[/usr/libexec/dmd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.studentd]

/usr/libexec/studentd

[/usr/libexec/studentd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CodeSigningHelper]

/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper

[/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AddressBook.ContactsAccountsService]

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService

[/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.keychain-circle-notification]

/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification

[/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secd]

/usr/libexec/secd

[/usr/libexec/secd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.cloudkeychainproxy3]

/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy

[/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy]

/usr/libexec/xpcproxy

[xpcproxy com.apple.newsyslog]

/usr/sbin/newsyslog

[/usr/sbin/newsyslog]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.bird]

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird

[/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump]

/usr/sbin/spindump

[/usr/sbin/spindump]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tailspind]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump_agent]

/usr/libexec/tailspind

[/usr/libexec/tailspind]

/usr/libexec/spindump_agent

[/usr/libexec/spindump_agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputMenuAgent]

/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent

[/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputSwitcher]

/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher

[/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesagent]

/System/Library/CoreServices/iconservicesagent

[/System/Library/CoreServices/iconservicesagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesd]

/System/Library/CoreServices/iconservicesd

[/System/Library/CoreServices/iconservicesd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.warmd_agent]

/usr/libexec/warmd_agent

[/usr/libexec/warmd_agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.nsurlstoraged]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.keychain-circle-notification]

/usr/libexec/nsurlstoraged

[/usr/libexec/nsurlstoraged]

/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification

[/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification]

/usr/libexec/xpcproxy

[xpcproxy com.apple.rtcreportingd]

/usr/libexec/rtcreportingd

[/usr/libexec/rtcreportingd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.studentd]

/usr/libexec/studentd

[/usr/libexec/studentd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sessionlogoutd]

/System/Library/CoreServices/sessionlogoutd

[/System/Library/CoreServices/sessionlogoutd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.akd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.routined]

/usr/bin/sudo

[/usr/bin/sudo -k]

/usr/libexec/xpcproxy

[xpcproxy com.apple.loginwindow.5BBAD0B0-C613-4987-8B01-DD6CC2851BFF]

/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow

[/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console]

/usr/libexec/xpcproxy

[xpcproxy com.apple.imklaunchagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.UserEventAgent-LoginWindow]

/usr/libexec/xpcproxy

[xpcproxy com.apple.universalaccessd]

/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent

[/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent]

/usr/sbin/universalaccessd

[/usr/sbin/universalaccessd launchd -s]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pluginkit.pkd]

/usr/libexec/pkd

[/usr/libexec/pkd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.agent.login.00000000-0000-0000-0000-0000000186C2]

/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent

[/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.cfprefsd.xpc.agent]

/usr/sbin/cfprefsd

[/usr/sbin/cfprefsd agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.nehelper]

/usr/libexec/nehelper

[/usr/libexec/nehelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secd]

/usr/libexec/secd

[/usr/libexec/secd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.coremedia.videodecoder 1027]

/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService

[/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService]

/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd

[/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AccountPolicyHelper]

/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper

[/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CoreAuthentication.daemon]

/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd

[/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CryptoTokenKit.ahp.agent]

/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp

[/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp]

/usr/libexec/xpcproxy

[xpcproxy com.apple.xpc.launchd.oneshot.0x10000003.activateSettings]

/System/Library/PrivateFrameworks/SystemAdministration.framework/Resources/activateSettings

[/System/Library/PrivateFrameworks/SystemAdministration.framework/Resources/activateSettings]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AmbientDisplayAgent]

/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent

[/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent]

/usr/libexec/routined

[/usr/libexec/routined LAUNCHED_BY_LAUNCHD]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secinitd]

/usr/libexec/secinitd

[/usr/libexec/secinitd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ctkd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.audio.systemsoundserverd]

/usr/sbin/systemsoundserverd

[/usr/sbin/systemsoundserverd]

/System/Library/Frameworks/CryptoTokenKit.framework/ctkd

[/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw]

/usr/libexec/UserEventAgent

[/usr/libexec/UserEventAgent (LoginWindow)]

/sbin/umount

[/sbin/umount /Volumes/Telegram Desktop]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sysmond]

/usr/libexec/sysmond

[/usr/libexec/sysmond]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ctkd]

/System/Library/Frameworks/CryptoTokenKit.framework/ctkd

[/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CryptoTokenKit.setoken 1044]

/System/Library/Frameworks/CryptoTokenKit.framework/PlugIns/setoken.appex/Contents/MacOS/setoken

[/System/Library/Frameworks/CryptoTokenKit.framework/PlugIns/setoken.appex/Contents/MacOS/setoken]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tailspind]

/usr/libexec/tailspind

[/usr/libexec/tailspind]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportCrash.Root]

/System/Library/CoreServices/ReportCrash

[/System/Library/CoreServices/ReportCrash daemon]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportMemoryException]

/usr/libexec/ReportMemoryException

[/usr/libexec/ReportMemoryException]

/bin/sh

[sh -c /usr/sbin/kextstat]

/bin/bash

[sh -c /usr/sbin/kextstat]

/usr/sbin/kextstat

[/usr/sbin/kextstat]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CodeSigningHelper]

/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper

[/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tccd.system]

/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd

[/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sandboxd]

/usr/libexec/sandboxd

[/usr/libexec/sandboxd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.usbmuxd]

/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd

[/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CodeSigningHelper]

/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper

[/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tccd.system]

/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd

[/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sandboxd]

/usr/libexec/sandboxd

[/usr/libexec/sandboxd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.akd]

/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd

[/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.adid]

/System/Library/PrivateFrameworks/CoreADI.framework/adid

[/System/Library/PrivateFrameworks/CoreADI.framework/adid]

/usr/libexec/xpcproxy

[xpcproxy com.apple.storagekitd]

/System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd

[/System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesagent]

/System/Library/CoreServices/iconservicesagent

[/System/Library/CoreServices/iconservicesagent runAsRoot]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesd]

/System/Library/CoreServices/iconservicesd

[/System/Library/CoreServices/iconservicesd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sysmond]

/usr/libexec/sysmond

[/usr/libexec/sysmond]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump]

/usr/sbin/spindump

[/usr/sbin/spindump]

/usr/libexec/xpcproxy

[xpcproxy com.apple.diagnosticd]

/usr/libexec/diagnosticd

[/usr/libexec/diagnosticd]

Network

Country Destination Domain Proto
US 8.8.8.8:53 lb._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 mobile.events.data.trafficmanager.net udp
US 20.189.173.6:443 tcp
US 8.8.8.8:53 api.apple-cloudkit.fe2.apple-dns.net udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.238:443 clients2.google.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
GB 142.250.187.238:443 clients2.google.com tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
GB 172.217.169.10:443 optimizationguide-pa.googleapis.com tcp
GB 172.217.169.10:443 tcp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
GB 142.250.187.196:443 www.google.com tcp
GB 172.217.169.10:443 optimizationguide-pa.googleapis.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 142.250.27.84:443 accounts.google.com tcp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.4.4:443 dns.google udp
GB 142.250.187.195:443 update.googleapis.com tcp
GB 142.250.187.238:443 clients2.google.com tcp
NL 149.154.167.99:443 tcp
NL 149.154.167.99:443 desktop.telegram.org tcp
US 8.8.8.8:53 update.googleapis.com udp
GB 142.250.187.195:443 update.googleapis.com tcp
US 8.8.8.8:443 dns.google udp
GB 142.250.200.46:443 sb-ssl.google.com tcp
US 8.8.8.8:53 b._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 db._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 b._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 db._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.4.4:443 dns.google udp
GB 142.250.187.202:443 safebrowsing.googleapis.com tcp
US 8.8.8.8:53 api.apple-cloudkit.fe2.apple-dns.net udp
US 8.8.8.8:53 b._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 db._dns-sd._udp.0.0.127.10.in-addr.arpa udp
GB 142.250.187.195:443 update.googleapis.com tcp
NL 149.154.167.51:443 tcp
NL 95.161.76.100:443 tcp
NL 149.154.167.51:80 149.154.167.51 tcp
NL 95.161.76.100:80 95.161.76.100 tcp
US 8.8.8.8:53 td.telegram.org udp
NL 149.154.167.99:443 td.telegram.org tcp
NL 149.154.167.91:443 tcp
NL 149.154.167.91:80 149.154.167.91 tcp
NL 149.154.167.51:443 tcp
NL 95.161.76.100:443 tcp
NL 149.154.167.51:80 149.154.167.51 tcp
NL 95.161.76.100:80 95.161.76.100 tcp
US 8.8.8.8:53 gateway.fe2.apple-dns.net udp
US 8.8.4.4:443 dns.google udp
NL 149.154.167.41:443 tcp
NL 149.154.167.41:80 149.154.167.41 tcp
US 8.8.8.8:53 e673.dsce9.akamaiedge.net udp
NL 149.154.167.222:443 tcp
US 149.154.175.60:443 tcp
US 149.154.175.55:443 tcp
NL 149.154.167.222:80 149.154.167.222 tcp
US 149.154.175.60:80 149.154.175.60 tcp
US 149.154.175.55:80 149.154.175.55 tcp
US 149.154.175.60:443 tcp
US 149.154.175.55:443 tcp
US 149.154.175.60:80 149.154.175.60 tcp
US 149.154.175.55:80 149.154.175.55 tcp
US 149.154.175.60:443 tcp
US 149.154.175.55:443 tcp
US 149.154.175.60:80 149.154.175.60 tcp
US 149.154.175.55:80 149.154.175.55 tcp
US 149.154.175.60:443 tcp
US 149.154.175.55:443 tcp
US 149.154.175.60:80 149.154.175.60 tcp
US 149.154.175.55:80 149.154.175.55 tcp
US 149.154.175.60:443 tcp
US 149.154.175.55:443 tcp
US 149.154.175.60:80 149.154.175.60 tcp
US 149.154.175.55:80 149.154.175.55 tcp
US 8.8.8.8:53 configuration.apple.com.akadns.net udp
US 8.8.8.8:53 gspe1-ssl.ls.apple.com.edgesuite.net udp
US 8.8.8.8:53 gspe35-ssl.ls-apple.com.akadns.net udp
GB 104.91.71.16:443 tcp
GB 104.77.118.129:443 gspe1-ssl.ls.apple.com.edgesuite.net tcp
US 8.8.8.8:53 gsp-ssl.ls.apple.com udp
GB 17.253.29.219:443 gsp-ssl.ls.apple.com tcp
US 8.8.8.8:53 e1329.g.akamaiedge.net udp
GB 17.253.29.206:80 valid.apple.com tcp
US 8.8.8.8:53 gsp64-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 e6858.dscx.akamaiedge.net udp
GB 173.222.12.246:443 www.apple.com tcp
GB 17.253.29.206:80 valid.apple.com tcp
US 8.8.8.8:53 help.apple.com udp
US 8.8.8.8:53 cds.apple.com udp
BE 104.68.86.71:443 cds.apple.com tcp
BE 104.68.86.71:443 cds.apple.com tcp
US 23.220.113.166:443 help.apple.com tcp
US 23.220.113.166:443 help.apple.com tcp
US 23.220.113.166:443 help.apple.com tcp
US 23.220.113.166:443 help.apple.com tcp
US 23.220.113.166:443 help.apple.com tcp
US 23.220.113.166:443 help.apple.com tcp
BE 23.55.96.225:443 e6858.dscx.akamaiedge.net tcp
BE 104.68.86.71:443 cds.apple.com tcp
US 8.8.8.8:53 e6858.dscx.akamaiedge.net udp
BE 23.55.96.225:443 e6858.dscx.akamaiedge.net tcp
NL 149.154.167.222:443 tcp
NL 149.154.167.222:443 tcp
US 149.154.175.60:443 tcp
US 149.154.175.55:443 tcp
NL 149.154.167.91:443 tcp
US 149.154.175.55:80 149.154.175.55 tcp
NL 149.154.167.91:80 tcp
US 149.154.175.60:80 149.154.175.60 tcp
US 8.8.8.8:53 appleid.apple.com udp
US 8.8.8.8:53 7.0.127.10.in-addr.arpa udp
GB 17.57.146.151:5223 tcp
US 8.8.8.8:53 16-courier.push.apple.com udp
GB 17.57.146.150:5223 16-courier.push.apple.com tcp
US 8.8.8.8:53 bag-cdn.itunes-apple.com.akadns.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 bag-cdn.itunes-apple.com.akadns.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 bag-cdn-lb.itunes-apple.com.akadns.net udp
US 8.8.8.8:53 bag-cdn-lb.itunes-apple.com.akadns.net udp
US 8.8.8.8:53 bag-cdn-lb.itunes-apple.com.akadns.net udp
US 8.8.8.8:53 bag-cdn-lb.itunes-apple.com.akadns.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp

Files

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db

MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db

MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

/Users/run/Library/Keychains/login.keychain-db

MD5 834991d5599767c8cf3e43f415f57d76
SHA1 ec0d1eae675fb1f532abdb337710c6894a2751c4
SHA256 b160a186317710f8a32bd8c788c96fd712aae20ab15454dc0e964a3a6156e1ca
SHA512 b5144fb8b67a2ac544a8e829434553238ed602fb5b5cfd23c00e0aff36ac62615f12f8338bd0a03eca4dbbb5f133773edb591d560c7533d22480b559afe499b9

/Users/run/Library/Keychains/login.keychain-db

MD5 c2619abf8c0782299787e9f289916816
SHA1 b8dd2e6213e46092c6fbd6a44a46b521f4551740
SHA256 ffc8fc3c7e0ff8e4097a7f5cc1653e34b112474b1a600b3b277a2d94f2e04ea0
SHA512 9cc83ec16544bb7c789e8e1973380abe26fe78edb22b2e34160a91cace6879f30c15fa57c6df5a9701c6f82f6d929b3b670aa562860aeef73feb4e170bc06570

/Users/run/Library/Keychains/login.keychain-db

MD5 186174892626a43c89501ed01c7c072f
SHA1 9fb7e6a438dc086937f13dbffa9b3885c53f6ad9
SHA256 a42a8a2153c8b9469f46114f61290613cef1664050fa075a876c4bcfbb0d9e11
SHA512 b92c5b2f34d219398a8ba45d99d60f99d0928641e195709ccce34e7f79be03d93325f8785fbe79bbb2899744475f36b964efbf7bc006d759cb5847ae05b310d1

/Users/run/Library/Keychains/login.keychain-db

MD5 c928f38868376f0ce01c2740937b70f4
SHA1 cd5e2fa28f8f621640ca002d31c40f61aa0d0197
SHA256 f3c6eed0bd5534465d68c5920bca34baae35601fc37cf31ca9957bb5ec3e6c30
SHA512 753c001b06702df656dd2d7ec95f31ab9bb54fd422f8779be5f5f6e57890b2026ff2d1c7b3a0068720adad374322a1be3d46a891005c47fb52105e993470226b

/Users/run/Library/Keychains/login.keychain-db

MD5 1fb53f883dc2245b3bcd9dbeb4c0ceae
SHA1 8cd786951caa8110a421214638018cdb92fc2bba
SHA256 57b17a883c269627b8bfc4c01760f67dce9503d5742e092c0589ead25ff67d8b
SHA512 07cdb60a099593a9f2e20a3b3c85582304b884898914ceecdf57a820a2539c3b89a261dc59fb85bde20dd7792a9d049eea3d480e63bc349f570ccb40dc155df3

/Users/run/Library/Application Support/Google/Chrome/Crashpad/settings.dat

MD5 fcb4024c6dc53a5b72c492fd960762d7
SHA1 82c43024d9e274bf2b8a5d1e505d65cf3873fb92
SHA256 5cca682cfa80faa97838327d83ef5a2cc39e21b0cf16639aa7c4f095bf1be4e6
SHA512 5373007f40ec378d18770218163ffc2870036bf8c0af1128194a60c6ed6d944f2e3833bf151fb5bf4aee9325c1fbab56bacf3f6437daaa59efb0afdc5c5eed8b

/Users/run/Library/Keychains/login.keychain-db

MD5 e1ee81883eaf0ce813aa2be0f89bb905
SHA1 1ec36503079ae06872175b56fd9cc953ccb1f4e4
SHA256 71e25e345cfbc5b7bbe633a1ba5a067e92822e8f92f27f012e38703e795fb93e
SHA512 33979f55bdec769f729a6bf6f5e45cac28320cf12b545bb62a6ac9bb94c6e17cbe71bade98457c801324da7256f32cf584544fcf0ed1fb0453abecbaebed0a82

/Users/run/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/000003.ldb

MD5 6487e04972ecffd0aabf7b61bdda8119
SHA1 26f0b11a2529a35f6970a914deadfcf2e2d23286
SHA256 241a349a63252a8026016a5ef0d713fc18f76735dd0c10963f9a693bfdb9b172
SHA512 44db500fa4549808a5ed1db5516fe4d412cc4e3898d102399fa6f467a2ed3fa79f133a0afcc5e1ab91f480267027ea11e48e37247d24513542286310ab2d47ae

/Users/run/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/000003.ldb

MD5 fe382e791274914bee5950777e4f1fd3
SHA1 53b523b5fc87e66f2520a0b5f9ea080072668f4d
SHA256 935d36c021d0e08a5648c622f3f6fde376e3310013680ae598c0e22dc943d132
SHA512 a5f608fb4f0a1dbc4c5d1b739b1a5b6f50cac1d6a61312b19abf9f601882a291d73524ac55bbe183e4e64db8dcc203d4bf3cedc734fd04bd448cb825d98d1e67

/Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

/Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

/Users/run/Library/Application Support/Google/Chrome/Default/Local Storage/leveldb/000003.ldb

MD5 61a867b6e4a24cfcfd32ddef25ac3229
SHA1 87cc4516fbce1700174d8ea27c9d2cb70a60a1fd
SHA256 9cc80c0d1dfe7205c6530402c3240171966e72b6df8ef0e8571660fb18652cd5
SHA512 3678cc5f913c7f6c179be8d8483240a1c9aabbe5b295d6aa2b8037c60a8f2aa473f1fb56a7ee7093aaa8c24b968d32fed99972f6f837868f86b53b45de13f4dc

/Users/run/Library/Application Support/Google/Chrome/Default/Session Storage/000003.ldb

MD5 b5db1f091948de93d7fc96e14aef6da3
SHA1 74745f991e3dfe45037366e55c2e6df47d8e6593
SHA256 b7600cfe0aa091e9ab8540869b7ea120a62b36240acc0370c3fd62655b58bf4e
SHA512 d116ffaa01fa29545758fbe273c10d57879a91983d6b5a86ed410a0ac79cc8370fd2552284afa56f363a75ba6a89cc5c9a33f99071012dba2f2f8298ad0cac34

/Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000003.ldb

MD5 b47a44bdd1b765b6af56b347447fd1b7
SHA1 8599a1870656af91e432bb35e3497863e34ddfbb
SHA256 79b1150f1008ed3fbde59417e9727bce33a34ee2ac5b407eec1a82beabdd2c06
SHA512 bfa1d967125878a40068e4d5ec4a4bed4f211373ef2ca839a51cb9a29d2da5afcc65755134af2ae732dc03391a636fbb222b4ae481315e4213ceb8d74797c9f0

/Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/000003.ldb

MD5 e0f65ad85a40a32fa91e551005e193ce
SHA1 a145766d5df23ae5fcd23dbb6937606f280f3502
SHA256 18b5270537241fdd8a8de2f4435bb9a19acc82d565bf629678c07360e0fa89d8
SHA512 bfcf2075ba3d99c6bf4840d6c7754668ac65e7b88aced5c727f99de68940783424b6e9755b4d90c28f489f87d88eda0f2b5194c292c7bcd0cebcb6a66adb2425

/Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.32.0/Ruleset Data

MD5 132df2b999906be7b21cc21bc247b068
SHA1 0665be201a96e717410a4e61a263bb879b3f08d4
SHA256 fed1557c8b4e40813114db3b546c043105892dd0895c4d7c02d45a8be351173a
SHA512 6764c8a425cd010a67a4636f812d43e63bb0815943e9839cf9fa35f3e5f9ba52309ed842306dcffe32a72e7019cb0c28e1d402dfc22dca0603a0cd48d6a26451

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.DNJkg6

MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dirT5MKcp/CRX_INSTALL/manifest.json

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dirT5MKcp/CRX_INSTALL/images/icon_128.png

MD5 30899b6c4e4a757b8ec6dd2208acdfb4
SHA1 f2c5880a724c6d75cce1b5191e0d82c3bc7de768
SHA256 4f17efbd974a41d88cb36567aab6bf4586579e78780f00b1826676819e14bff4
SHA512 58539e3f0ad7fef30792efcdbbd955599e11e4261c9946e7c3dff6267e01747354ea3b901c46fc8329f81c68afbeb2d05fe3fcb266bc5948de8befa5b8d040ee

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dirT5MKcp/CRX_INSTALL/images/icon_16.png

MD5 344554d96e418120bd80ef5de5194697
SHA1 23e141c3a6ce368acc1c299f062ab85914bcb17e
SHA256 0a4bd08db6422f8e7a8a218ef39c1b99a5a675f12697f26be88f9afc2e1f9378
SHA512 7ae38853e5acca479d7fd81d48bb88c671cf4dce63342209bcff045ac581a04b7b0ed48f6c58253db950935c0522caaa4fbc6cf5a25151a8960ba56fc804569e

/Users/run/Library/Application Support/Google/Chrome/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.6_1/craw_background.js

MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2

/private/var/db/spindump/tailspin-trace.2024-06-15_21-21-37.tailspin

MD5 cf5c035af0efff6d1266614776be1f36
SHA1 c89ecd14ed7e5afdbfc826459dae6e088499ed75
SHA256 6dd653e026e555ac9520129a3011001992025c3dbf55f80d3cf303beb2472f84
SHA512 981bde5d8b8d43e7c5bd14aff4ecc882e96f240899f42a59396d18fbb159c74b334ba21827b7c3198f9f72ecb7062143f9392f14ad0aa11bfe7da9dda0679496

/Users/run/Library/Application Support/Google/Chrome/Default/Storage/ext/gfdkimpbcpahaombhbimeihdjnejgicl/def/Session Storage/000003.ldb

MD5 38fc535a8f11d7e955ef58cc63158eff
SHA1 c45ad3ee106dbfb65dce7c09b53140f34454cd0e
SHA256 085c44dfa11e65ac3548c4d0fe1ae641570f90c7caaa2881c3990efcf555e6a8
SHA512 26e70000f77c1b6388dd470f9d7ec6bedc4fc3c43e48efcc853812eb076108bcdd9f50f7a89265e431d33df96e71755ca242dfd0aac16a51d99dea50a5a1e505

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt

MD5 32af34ceb1fa56e26f934e9dd575ba91
SHA1 ca185c252dfd976013d73e1dacb947d08a8da7cd
SHA256 e0b17c701a99297248772b8ff3b2037d91ceefc370277cb28cb3252f0c6d6f8d
SHA512 07d709b5020706934e1614aab1e8c701ac1b78223537be785851c5cf64963c9da802dac4865ad12cb4198c51d087280d9cb66b020c875b170010cc31d379cc99

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt

MD5 dc2b723ecd106d30e6c91d18c0dab82d
SHA1 60958e353fdfb479b32bd29f738e01ad4fc01f9e
SHA256 d661f062ff080f20a0725c5f90a04560a7338b5b26f2afd401d1f62fd82a50ab
SHA512 673450b1f11470cfe952e975e647fb27bcf113ba988a4a247f84adc4f74061c29d8871d21b3d5f7092f158f1fe55aea9c47087485fd7d76eb1e211a41cc8098e

/Users/run/Library/Application Support/Google/Chrome/Default/Download Service/Files/Unconfirmed 383655.crdownload

MD5 bb6f09922f03707723878af0aa0da1ae
SHA1 95140e966d50d7fe73eb4a13c4fef0163bc62c5c
SHA256 cc14916fbf70b1e06bffa0e77fce83e2c698f17b485e889e9de0aa157a6c12fa
SHA512 538a5f2b181099873c5b9175c6a1f6bc3d56acc8cdbf7e21ee067e61f9cb59dbfb745c05e6e0aaacc34d06ae9a2075de9eb5494b6660e6bdf8840cac8277df87

/Users/run/Library/Application Support/Google/Chrome/Default/Download Service/Files/889eaa91-44db-4b4e-aacf-52d9a74339eb

MD5 5adf364735dcbe6bf26ebe3f705c9dbc
SHA1 a891521fea2f61a2fd16ea9f0a3fc3c2c5fb3a46
SHA256 8d21fe1bd251856bfaeaedd6a72ab78f153a047b6042e0fc614f57a32b56d340
SHA512 5f77f8923ab3800ab754f4c60095077b529c5f5f230c6a0b6803dc28597f42ed682921267ed344e190d0f08e0a23eceace7bccbc9d22432029a3e6f4838420e0

/Users/run/Library/Application Support/Google/Chrome/OptimizationGuidePredictionModels/b1092b42-e6ed-4533-a6f7-c743641a0c65/model.tflite

MD5 6d7c2f9e94664539dec99b3233301b01
SHA1 85812b004742cc1c211c92911131ce270f8ba769
SHA256 a0956386dc64fd9f4883c8741f950cd60a56859616b159c9e4251c9eb0ac5534
SHA512 4d06917f30651c3bf13c509aae79793b3f1ec93de12179464b18fd9fd16c7bf466884b1c70e425d7e937adde341cf24bd08f19a132bbb9683e804f29b4ed0c33

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.guQ0vL/khaoiebndkojlmppeemjhbpbandiljpe_66_mac_adbxmk3cir53o3v2f66pezkgcbjq.crx3

MD5 ba0c44cdcbb9f1a8b1b2cbed95346caa
SHA1 c9a5e9df64b46db7bf44b091da1c5553137bff55
SHA256 3658efbb825c2826d2c66de6fdfbdaaffdd1d053105eb7d547e34d3271a59948
SHA512 61d9521200a86b583bff7ceafea793513ba34a5ae43309edabd9b19a52277752adcad1f0ddf5e33986511e75a2c9df0b13b9b520fed1d1ef8590644bd4483616

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.lJJM9r/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.49.1_all_ixzyrcu7pvmgu5pjv6enfqq6wa.crx3

MD5 2db7e78c310ca8e73c069a604eac4d99
SHA1 a6d1e03514f8eba03ab81f1380fc54aaded823b6
SHA256 cd1978742a4afdbaaa15bf712d5c90bef4144caa99024df98f6a9ad58043ae85
SHA512 681eaddbf304f4513b008b98493272b44815460568876b93528851ff7806775de38e6ec588fe27a2cf3dc804415e83a420e45d754b25ad4bdf68ef2c78403aa3

/Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Unindexed Rules/9.49.1/Filtering Rules

MD5 6274a7426421914c19502cbe0fe28ca0
SHA1 e4d1c702ca1b5497a3abcdd9495a5d0758f19ffc
SHA256 ae2fd01d2908591e0f39343a5b4a78baa8e7d6cac9d78ba79c502fe0a15ce3ee
SHA512 bf1287f502013308cdd906f6e42998c422ef1e272b348e66122dc4a4e471d01333b418f48d1bb2198c72845bdc950612597e179e612aaa1ba6cf8d48fb8f0cf5

/Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.49.1/Ruleset Data

MD5 c5e30274fe7b93847f6d7c02410d1209
SHA1 488a49f38459f29e110c706c51b61ca1ae3b0e26
SHA256 e634e3cfdd0d27d0be1f5f9a19748d19d564928765db343503f42a6e1f5dd4ea
SHA512 bc235bb3af269e9a828e6788dbae2b42cabc879b858102f4cc76c0fa02af0e296d20ffc8f134c0a3f9b408643e4810e8c46afeb0c285b892908b06ea1aa1b811

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.yalIeX/lmelglejhemejginpboagddgdfbepgmp_452_all_ZZ_adydqv3rleu5rnck63k5hz2kfjyq.crx3

MD5 c4d10d513002b166d685889705ef285f
SHA1 dac56a58e27e9240c461512dfc865f4b25dbffc0
SHA256 8a609cc96a7aa83f1f3cf3d188c04fed2364af58d0a92a6925a6c43ae593c528
SHA512 b6d846211d48c14f086d552418779e95baecc646be3ba9800d78df4c4c92eeccb751ceac248367a96ba0455d7054bfe54f7f4475bc48dd302d4311cee986b3ca

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.Zx0U17/1.0.0.15_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

MD5 39fbc1bf4c6c8f919181e3e72630f974
SHA1 b73f2394a2c1ac341df75ba63eef4e5e9830fade
SHA256 3a118962ef814c91f6476bb9f0de58afa63103af6ac1b8729be9b39a86789e96
SHA512 2dbd8f772bc113f6500dace5d187b12c79e6e3a5c7f6f68d270beebc482334a1970499b28de5187a3619ff3ecd20aab10c31df8433d509dc011e1e88978ab70e

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.ocGIwC/efniojlnjndmcbiieegkicadnoecjjef_985_all_adtodlxrqtho4jnokedqmmwfegfa.crx3

MD5 855af08f6e492ed36e23140025eab29f
SHA1 abcfef6677f6180c5bafc0b7a573c7248cdcbaa3
SHA256 ad1d2aaa05740830067bf2e7fb89d5185a9ee417816c300585052187e7de39cb
SHA512 0acea5050cd7ef33da9c48ab5a8ca3c14a5a64ff102d89ece4c5d0a6ac3ddd5e1fa813529f6b999ef3318eaf8cfc0d20ddfc5e469e3378dc3b638de844dbe703

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.1sqO2j/obedbbhbpmojnkanicioggnmelmoomoc_20240429.634529504.14_all_ENGB500000_drh7pqj4o7a7karn7sdqrnqyte.crx3

MD5 3e6d6a61cc262006521d4cdacd51650e
SHA1 f02ed95b7684766bea947be2035d2078bc8e4f82
SHA256 c9be68fb5ec359ee369c324d2d1a259b7dd9c100a8d1064e887f6311e6d63d75
SHA512 e84ed2b159664502bcaa8d2277e6972ad936f7817eec4b5bb3538c98a022d70b1d82b0ee950f613fa4a6f1de9e2127485573fdea8643edcbdb225958ed75218c

/Users/run/Downloads/Unconfirmed 896265.crdownload

MD5 40737ea9a50a450be3ac73fd33e8cb49
SHA1 a395b053ba05383e14dc2aea5184e43bed33b640
SHA256 bd966a1d4a8590ca0f27da97f8f6b4e44a446e31bc498d3f4149646f858f4360
SHA512 22c7c855c7a41ebb1a92dbf197760be549e04d173fa8b964384ef47cdd0a36d93f57431abda1dc387ed5ba679ca42158335bb9244ded27e88c2659ac1a6aae45

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.barJ6Q/hfnkpimlhhgieaddgfemjhofmfblmnib_8851_all_acrb65cp27msfllrrtmgyt3mnqza.crx3

MD5 0197b732b6ba59aec67335d2bb8bd265
SHA1 c2313ea027d95b61ba35a8f30805d89501af72c2
SHA256 044447f2cd5f76a7255d81951145358212ac0320ea8927bbd4327d75cfc5dffb
SHA512 f325e4f8fa8aa68fe6401276bc6770f6a9d4c9f914cb4bd75f1d47e740dec92a2ab14522f567402eabbe0b42ed5ce3625d4ef40a31f46de1a532158d1c6a6fb9

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.ELpKGt/dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3

MD5 667e9eec04509aa9e2b318f580addd8c
SHA1 346267ecad10c54de52a3aeb766ea72449500326
SHA256 0c24e9bd976adffa987e08fc54dc0950c84cf18f9cdb4c5caabc6acf24887c4f
SHA512 a9d22d49290c164abf36dd7e887063ccdd2bf508eb2d16bbac6de749e5152805ecb38ca39352706150de29a76839fa6a56c084ea4f2757b61887b3a7912be917

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.wDfRMI/laoigpblnllgcgjnjnllmfolckpjlhki_1.0.7.1652906823_all_jtggsagwbg7dhs53nvq4e53lva.crx3

MD5 91e1255f92fc76b16509bbd174a992b5
SHA1 44cbc6b7b60470149850d375f2e2ae95cf1c012b
SHA256 29661be65c8fb50d3d4df2fe040a1cc6dd525f50a95850aae6a191301c3de744
SHA512 ac1588c003c345aaf9a7c4b5f2d338fdaba041dacd65db567ff8cc588b47e372863e44a4a87f611c1530fb42fdb1388814d3caccf8bb3498c7efe78fc321d9cf

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.L1diC2/jflookgnkcckhobaglndicnbbgbonegd_3032_all_acepdereqodmttqt75p7zdbwu6sq.crx3

MD5 af07203385b9f9b696982881c46dd651
SHA1 6949e711d91dcee15f94b961c088a97b6869a49f
SHA256 d0fe98a9a7e27f2d05834e6a497fec6979d4ddaf4a14f683728ad9bb09c9ff2b
SHA512 28016e3820e40c940839fb73682950888f3273f3a69f986bc947bb3749b0e9eabfc1da75752945e412fc85474d0c7ff0e142279deae4374be65fa35f61ed109b

/private/var/db/spindump/tailspin-trace.2024-06-15_21-23-10.tailspin

MD5 382fdfd7bdbfbd987fd3c4fa78b4878a
SHA1 aa5d3eb621221b184c905e0a214bd3386dfefbd7
SHA256 54dc3ebdf7f317e6c53a0cd927af083839afe8e35a09ec34e29e12320bc3b4f4
SHA512 abd13242004603b16782cc626db7ce1048832100fbfa25f6c218fcfd54603638c1434ab1f6cdbf4ff9e7ce5fceebfc3a432264570f7b7a67836dbd919d5bb1b1

/Users/run/Downloads/Unconfirmed 896265.crdownload

MD5 ab8e3da362c7dc4e02c40402881f44a6
SHA1 a4e398332c01d8501355ffb6718c1b3ed1f9a9cc
SHA256 689cca669e9933b7f6c6b1ec422424ba5ac287488895795c2030c0927652585d
SHA512 c21fd8d0401aa310b472cfd203ad6607fe4bda20b4a76c7c58b29a014cc5db1fea43ab019dea16bf7ab518f10d9ba28bbeff7f9475bd4b197c702f8fd3e10948

/var/db/spindump/UUIDToBinaryLocations

MD5 e16cc5e1746a8d62f9f4b5b752bea968
SHA1 fea7655c5947a8a6b6fe22781d5ece0ec079c840
SHA256 19bf0dd63de77b53dcaa505eb8acf273ca32a678ad26674c69145721df594a70
SHA512 94d5531890551bc09a1aa7c837a8fdfe414174f9803375ca51d563dd170181fd6149e29ddfd1d26779ffad294fc9a4a41542596c5108edceea1d6da9ae072227

/var/log/fsck_hfs.log

MD5 6d6f0e0056b6f94fdcbd53551e11658f
SHA1 5f1f1fb4ca08c06bf0b5e5af8c10d9f4bb5b39d9
SHA256 1577887c09e0bed1abc7e7c8763048ee080d4bc8800ce7c56685c06606e0cdc0
SHA512 7b41ecf018928a11b6680f369d7e57ef8f1360db97c3d5c72106210c76586bb977b7834c6c525d4e8638c9e7a9067898a99bbc911eec08a0a8c49c0fdb2bc4aa

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.WaCWDz/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3

MD5 0fa505d26fd906c645e60aa05f12af36
SHA1 ecb1def63dba6d475dcd61c4d3a6938855e6f24a
SHA256 9738a550f51cdfb80146b1620b40a37d58c5136254ee1f0f03c20a864fab89d2
SHA512 6c49784a21465a2b7348720003f072a279a7aaeb88783b98cdb968a54cb1ce6771122a6f1bbbfb8dd36507576c81d6caa000166f2dc0f81a3feca4e8d5131a00

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.WaCWDz/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3

MD5 316563b59f2bc5dc199f89d3cba5e166
SHA1 17a3531717faf1c1f5f626ed90ff629107d5fe7e
SHA256 7d6ddb3157ca98e312e47bf60736ff602a0041df2d9d97293e15ea371b816696
SHA512 2e3e19c64c2ddcbbf7752c3831f1f8246d98ca499d53903168b8c28d4c70d7673efeb5ba7889e72164da2a9df034ea9c53364df867e217f2870da267fca5ed87

/Users/run/Library/Application Support/Google/Chrome/ClientSidePhishing/29.0/visual_model.tflite

MD5 a9803d560544e4d1fe551b2c113c5370
SHA1 a998fdb1e80dbca61267db112812a7ee34b82dce
SHA256 d38a4cda8912f9598b8701dac7d5ee90eff324ed1fb9d277b9784fe45a4e6c72
SHA512 65b8b6ecfea2aeae95a39581c39476a54721e07ee7c296650ccddea29a09b29a11cab15fdc89f97295bd61423dc13a66666faca371200bcb459dc1f25b6c89fd

/var/log/fsck_hfs.log

MD5 08ff449eff8c6a4b893cf4ec81b075fb
SHA1 0d1b940b68b19539c713fd4956815c07b1359bfa
SHA256 df86db7304d4f421d52a3b4fad22b29d74a7c779bd500b25b8ffc7b7992d29f4
SHA512 09308e3e2851fcef38a02a2038dd611474c1ac87548c10d62c478d3d8aa39729431c59360b26326f02a013bd5cb9c61a90bdeaeefa110316c18de1ebc339c169

/var/log/fsck_hfs.log

MD5 eb28835dbd5554dff05f474c0dda24b8
SHA1 fefc8197dd87d9a449d6dac56b0ef0b6d7e7ac7d
SHA256 1b7543909a18a1aff69cb940b101df7e879a175340e88b8368c5fde6b3fdb092
SHA512 5501e4435c75944f051304c28cbcfd7a6969ee5599e4bb1a0a96c36ca7c38bd47f2042aedeff0f2882c213b00bb280e0d86e2b7b1edfe2510237442c136ae9f1

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt

MD5 6baf0e5fb7aaa7e465d6a53328c3e01d
SHA1 43ec5ced56c52ee8c111e921af89aba8435ade66
SHA256 4dfe5a7ff08cc08677e6acc648e52d3727ac75aba8fcc0eb980341a65208ca74
SHA512 972680ba26a5518a61cf1b3d43bbc15a821118e8c2ac73b9b9e3631fe30a9e97ef9c2bc7ee0bf29727532ae930b4a5ee33ce757e50dd693d8851d5f246a32f4b

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt

MD5 337863b623c80a2f3c4e47c941151a71
SHA1 5c238be81d0abd80930ef8ac5d62985b52e75365
SHA256 5b0525fa200f538681f43dd21473e739ef8ac3006f5295b937db4af3814d294c
SHA512 fb243ea77b3eff9abbd9fa41627e37f6242f3f9abeb5975e1a4200f63dfedb88d45f532d9e3de3d8f938d2bf7f0d4dd911b01f8d914f92b36a969cbb84ef7d40

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.et8sVX/ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3

MD5 a40c655b337e082c76b6ab04042b7ae0
SHA1 3cc2a2b7178a29fd2d246cbc532684d6ae45bea8
SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
SHA512 fb4d54b573eb2275d8a3580fff138ecd7bded27ec58086b909b12c03c8005e35105c354a4a1ff76ada608ee8bbabeaafe208bb9e557661bb74e4ca39ee5eee56

/private/var/db//keybags/persona.kb

MD5 82811cd2b1c4f1f74fcd27d1ed7c54cd
SHA1 c07761a6c87c3d34f2f73ce51c0ea99c3f9cef0a
SHA256 d83ccd6ee21779ec349294035bffb29a0e1456714111bf66ffe8f443f2549053
SHA512 cab877edd72b500c0701d08c44fc57acc3922de92181a31e3e5bb05674f082c6b2d28841e4eb7484a633d943adb0cceb3a060fb3256bc53a5d57a31b59f0e42c

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.DEZe7H/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.10.19.1145_all_ac7cecrzrmfngskhgmtk6zmhfjoa.crx3

MD5 cb79d407a4d6d8526b42060b9210b5c2
SHA1 331e3d66e82e130042897faf86dcbd05d7b227f1
SHA256 e3a7322843834a5270a01c56533a34a24b1a253e3bda6f14046e10d818446165
SHA512 0ea283f2077ff874e1f2518565497864b11fd8a65f03d65e2b2996048bdba19849fcab81d9a8220cd51d4a09741b9cf222b1393f6ea4fde6db76dfe0590efdf9

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.UTrrsS/eeigpngbgcognadeebkilcpcaedhellh_2024.06.05.140657_all_ccj7nw5iotmqmvpbhiiji4wfca.crx3

MD5 0b1bbd3a85c6b5b46ff609b906632114
SHA1 305db6992df90fc483d44991fd9e98e43715ccde
SHA256 26c197ab0b2bd999fd5c8b5932e5700a083febf68e6d35f56b2473d6858a02cd
SHA512 1953eb559161500e8ab1a5aa3738dde247f0682cb632cf0304167c6dd82fa12a08dc971da337c272a4f0945d299331c5f0aa55edbc0479df2354c4d4a365ddd8

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.ZDiYsZ/npdjjkjlcidkjlamlmmdelcjbcpdjocm_1.3.19.240_mac_adygwryqqyfdwvvjh32xxi6rilea.crx3

MD5 91a8d56c19e60520cf00b78a506b87f0
SHA1 a794be44a680983ac0f87b1faedf064a65016623
SHA256 b158d145928f6c80d855f1fcc5b6813e73b7e14327d65fa9abb26c438e56bf29
SHA512 efe8b3be1ff7c30596230e091a5109b1328b3f603a4f3cad134ad99cf648b8b3a0dbdd79413f854a53dae4e1316862c6b6798660dd9f37283a97115905c65d06

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.hIvxAt/gonpemdgkjcecdgbnaabipppbmgfggbe_2024.06.12.00_all_bpxkkxixetevs2ruo7dy52yj6e.crx3

MD5 f44b3867acfff38158ff8f12b5cfe803
SHA1 682d8d8bb29867ae5d966c24af4081971dc32d05
SHA256 24b224da50148fc830da997f872f0345100c290d1f5d5b8ff1ce967f53bcf8cf
SHA512 778e7adb7a05cbada40a4447eba115729fc5f7e9bf1946353ec5d8015dd66280830a1841b1af22bf19d54c5a441eaff4bcf0a95a6520529293b94b7e1bca0af8

/Users/run/Library/Caches/com.apple.nsservicescache.plist

MD5 48257360d3992cb470faca687ca4642d
SHA1 5f140ea46c5ad2b43a630f2ae7d0816d482ecc82
SHA256 9a914450e0fafb1383c3b91a1b6166e9df784febfa20ed03f616614dbd8a2857
SHA512 b9f2ef8f1336946717cb5266e00d6dea599082ef85287ee2645851dbb97530191a9462c569641957a58bcb899e0e03c708d281b38bc29be3c2c2abb8d3d4671c

/private/var/db//keybags/persona.kb

MD5 8eb58b07d78511d280192484d0566529
SHA1 586f2783ea03f23652f364a513b5b414cc7c7539
SHA256 dd468b90dda2d02f273f765448d75bdd2b8f92f0e352516c7910effb5b618e5c
SHA512 e0b52e07c08b64bc04b9d506ec7bc87f04f773d3bb5797e59e22b7387144dddee35e05ca26db90d4466619b59c802de7206ef60fd94745131f870e9e29c4aea4

/Users/run/Library/Preferences/com.apple.security.cloudkeychainproxy3.keysToRegister.plist

MD5 ecde215a82eeac460378acf5962d031f
SHA1 2c6c5315f6bc5e4262a6ce348cf5b6bef9469db3
SHA256 72b2c221609a38f49cd903e663f34d6d5e4fc66e980e55f130e20aa628d4fce2
SHA512 0267a081979b1cb52a5d5509332afc81c4deca923321e12fa20c0d6261c2a52b129269661b3774b1c424118a1980715f572e8cc6848ff46691d2131b06ad5e2a

/Library/Caches/com.apple.iconservices.store/506F6A4B-77C1-3F5C-9E6C-CA267B9D926B.isdata

MD5 2a6a959992e0311dafc9e3b3abc890b5
SHA1 8cbd56b259a5a545308777c81e86a4d8904ba58c
SHA256 506f6a4b77c1ff5c5e6cca267b9d926b25e761a6d0c0c8cd601d3b6312ed700f
SHA512 cc459ace17944d22db6a924d1fe246c24b30fd0e7e03d83ae677b47eef7a47260a127d0aafce4575c1665265f52d7adc9019a7124acb28b3bcb0c85ae78163a2

/private/var/db//keybags/persona.kb

MD5 2f29a7caf1159d4767acc3fa2b36aaca
SHA1 431254b8c3bf3ffa668e72803abf1562be100a15
SHA256 4ea0c5eb2a15e0a5040a07e747d6407bc0d369e466fa2932eccc85011bea82c7
SHA512 caf1cd0821bed107715a58a42322ac049687d7e5749c5d571c3974f3e7e39f01dfd735c190262c73a5647165466dfe51d7b96d643533d5a3c3391841ea4ca44d

/private/var/db/Sandbox/syncroots.db

MD5 e4946ad9e7a4fc02dfc2ef1ae0e17cf2
SHA1 add1ccc54e63d497c26a1a9956443c6a1bdf8b9f
SHA256 3c830812eb8dfacbc699dac1c177c1d1ef2f52c86a202bdc669514c8dbf2b1a8
SHA512 77f06e92dd2eaed59cc043dbd2b97bd82a06e360e284abc9a7499ecc736f65fb17e58c1897506ad2ec9605bf49f0de41ca49ce314a618e852006dfe2f0a9aab9

/private/var/db//keybags/persona.kb

MD5 b81dd5bcef5f8fa04fbbd12c141271cc
SHA1 ddbfb7d1cedb1c8aa1d3d2b795ab503af378eed9
SHA256 8a0ed1c8be81e31837858667848bcdb07155309d55c94f9f1368017615a93d3b
SHA512 d148e64a56bb32461d466cbdd86cfdcde2ff6d1e12b15e4e36ff280411fdf5092ff2cfce3cd2140c07058fc4f4b0f35112ef9db43db00d051c17fd54e0f6b640

/Users/run/Library/Caches/com.apple.nsservicescache.plist

MD5 7d677bdb2dff42a7db35e2f7372799f4
SHA1 7d4ea75933c6dd680c15bc2ab15205b7174b3e68
SHA256 442420936d29de8a72005bbd835da729853e8b80417c219680d32058f3548d87
SHA512 caf22761ad4dd5ed2d2bb5668469394f21236bebfc27c57a85905e39fdf7163fa00514cc34a955ca82c42e4bfc55cdfb846f969c35553d06c7a87431f23cc298

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 22c1336cce88205b0017bcdd303a657e
SHA1 d874d6f10524856d773acbce0f605e1d9c8bf03c
SHA256 35052c4dda8451478feaf69a9610c54ea6ccd3095c70cd8e981aedba470cb2d1
SHA512 8db2cb35932230381546dd7514d18006cd460f055c5050fc6545ba2d0202bab2c77910d485ecb6744c7475a7f1cd88023f8a2bcfceab3d59e98630f787eed2fc

/private/var/db/spindump/tailspin-trace.2024-06-15_21-27-45.tailspin

MD5 7a38577a3778178fe939e410516cbc50
SHA1 86dfa693c103dbb06c751428a35819ce4a408f1c
SHA256 b5b2f39894ed3cc1397cb7e1e17eec14d40009e96f9d99e6605bf1527398195c
SHA512 48e02fe7bb93ebd69088bad5df900d44762d82df7ca488c7fb38e23e4a4d598c6ff879f5668c008a26a85c99b3fdadeb7dc09904adbfcecd6e5dc4a612c2957b

/Library/Application Support/CrashReporter/DiagnosticMessagesHistory.plist

MD5 9d9c6ae83197988bd4fd276cafd44f6d
SHA1 1f5442a8def503c14aa9b270ed20599951ae36fa
SHA256 d41cf10f295561ef7bac6d35a4df2f9375b8b54954ba3133c92e9b6e48104c9a
SHA512 6850b97c72627be286209ac22981cebac23a1ef5bccf8368d3c900f128cd7ba10a6d56c200c49b819dc80672b9f9e1afc537393e3b1250c9abc3c45527570de7

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt

MD5 f9a5ecec39df29e1448ec0710fa8cb0b
SHA1 fd72d46615e78d1ea6854b4b8ef61c890ba16ebb
SHA256 361e6b961764f29d361398a3a26f5cfab43fa3bcfc42d9352284ae18cf6d3eb4
SHA512 d679b9d253411e370015ad9c897920499a2f8058a7ed15e3b31c8c1a3a009650517cd97c38212180bb7a6f7186d18fc709961ecd55474cb95148844de0b049e8

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt

MD5 6ef7027067d6cb6b588d0486469e3a0b
SHA1 93de34683f60300741996639629f5c07d27c4eff
SHA256 72da5fb155c521f70103ceef4ec0d24747a5346ed67f4d82d5217328df4652af
SHA512 cd5efcfa6ef8603f0c35582551f8acf7d91a93f81f3de682e625c26a2dd27fe98d17f5fca3182bd37e56dea0c0fc6de788573d76b516502e86a0d2b55d434b52

/Library/Caches/com.apple.iconservices.store/D9205D40-8567-3B73-BD23-CF438F39E895.isdata

MD5 8dcf03a44a330b94e1f7dc5ff339eb6b
SHA1 22fb3c8f453ac8af3d66a486052d93504aa83ef5
SHA256 d9205d408567fb733d23cf438f39e895e2ff15e26f2a8cc20a6f936743912fa4
SHA512 946fe672eabec649e0db80f308db152f05bf28cc947b9b79dede23d543c9521cec1434af23e24129994a562bc829ad9547c4f93aa2244494b1b25af50f0189b2

/Library/Caches/com.apple.iconservices.store/1FDD1611-D0B3-31C3-8472-76449AB822F4.isdata

MD5 eb8cc7d46e9ed9858da8df48560b7bd2
SHA1 dcb4284397e2569f35b1805e1c149e7eb7fb48ca
SHA256 1fdd1611d0b341c3c47276449ab822f4ed8e7a249a09d32fc3a4cf5b16e134d6
SHA512 7e1637f1ef31fbecd86e69aa06a5c802734c5478889d68737f987b19f2142f7766e8452a5c6a7d6125be1bddd62f0dc5df90af2f26b06bbd822c18f70afa0fb6

/Library/Caches/com.apple.iconservices.store/9E7509CF-3A56-30F7-8412-094F276D5EDC.isdata

MD5 5216c2e1e8a9b6a85914305cf826f02a
SHA1 dfb18fe4c285f6f523b738213682125deb03a8f0
SHA256 9e7509cf3a5610f78412094f276d5edca2e4ecc3a75c32ac52e011b8a584dcc0
SHA512 6e40446c884a073f4828aa9ecdc6ed068edcfdcc17febb9bb24222d94038f2f68ffbb3d071f38081bae67f82b6764d8f004098c020525908c44e49e9b0fb9845

/Library/Caches/com.apple.iconservices.store/EB070443-C24C-3266-9E21-20324BC74AD5.isdata

MD5 5f797e1fe0ae00e0071d0f85d36c9bb2
SHA1 080fd5258d4d5224d04bc36d754921c619e28ab8
SHA256 eb070443c24c12669e2120324bc74ad5b4e1a1d9f926e3cee949efe4290998a9
SHA512 46db47cf2588178d9a7ef067e8230358f3eeb9b27a7e960e019b56b613f9b0b3fddb24d1de70835283247622d71520d9e15945bfb62d1a45f0ad45a47f0ccfd4

/Library/Caches/com.apple.iconservices.store/CF3C2587-8B64-3CDC-B9B7-0BAE576DA49C.isdata

MD5 2403743f8de4d823341dd729e2921138
SHA1 4cf00356ce0f39f543f995a43f1e778a214bed42
SHA256 cf3c25878b640cdcb9b70bae576da49cd6fed6ab259b07a122a7428ff1395d1b
SHA512 228ee79e3974df5b2a4f5b47b5daafccd750abb8bf75a4dc99cf04c2920c0e0f404bca987665ab56e93624bbc5db04741feb60c38f5a1505fa67ccc620321989

/Library/Caches/com.apple.iconservices.store/1913871F-B2F3-3B45-845C-FFC0B69241ED.isdata

MD5 c1b1025aaeafd255d6c704536e74ac41
SHA1 5e762876cc6f6a7abaaf3cd609e8f78517f074c9
SHA256 1913871fb2f3eb45045cffc0b69241ed84599e24b9b87df3b1bbcd6eabcb03f7
SHA512 94231e5a9daa871321e6d6a3292e056ed9e091531f8779faf78f6022e10a9e437ddf78638df64fc0a429a1a1a6ab287841f067163412d95be8e37a7d847fedb7

/Library/Caches/com.apple.iconservices.store/B1EF9EA9-22A4-397E-BB5C-0FFAC568FE5C.isdata

MD5 8a99bbb89df34560095f634c346f3827
SHA1 962f8b1a39ecc8a6eaeb36a6da11c9abaa24fba6
SHA256 b1ef9ea922a4397ebb5c0ffac568fe5c8da73d1aafd7a35f775f132a42bfe7c3
SHA512 cb3c25a0585f555d0f3dd65be315c73a56ecbef33378224ddd5af408afd997b567abd2ca1242bd2dae154e4abdedc1ca67f6c93152dd3c1db08a7d91ba47df10

/Library/Caches/com.apple.iconservices.store/18CC4834-02AC-30F6-A72D-EB11632E3AF2.isdata

MD5 de21aa714f19d9159a734c7d731cbe1d
SHA1 6a2c0c1af14dd9c3a847e8dd20b7fdb8254b70f7
SHA256 18cc483402ace0f6272deb11632e3af25208f38db0e3225a18455ac604b26f7e
SHA512 bcdb7eb6440c2823a1f1345dfd7ffaf1453d312410e4caf2f3c7dc9c7e095d3fb40f18d2fd1b9346ffe7d3e08c4bae53317c108ad0dc6693945a24573c8ccc91

/Library/Caches/com.apple.iconservices.store/C8B904BC-0ADF-3FDC-885E-41115F18F3B7.isdata

MD5 772e09a851d08d265b59cd42068ba38c
SHA1 678ff4537d13b24bd17cf3ccf30c0c3f34bbe410
SHA256 c8b904bc0adf8fdcc85e41115f18f3b75eb04066870e9b3e691a40b4125883c7
SHA512 9d9853b6a435fdfaf68849c666f895a82a9e5dbc261dfa3700849cd99340f251f1af4a47b9234965f6a58414a7a4f605290cd8663ece0983b91afbf850bd35bd

/Library/Caches/com.apple.iconservices.store/DC6C1831-4F73-373D-9661-00FA14897DEC.isdata

MD5 58cd32a6d90af1fcb727be50b84001dd
SHA1 6295fdffeead30566f60be80d822aae78b0ae951
SHA256 dc6c18314f73273d166100fa14897dec4657d98b3aa27c00e2c709122b1e75e9
SHA512 54f34969c3c4c737c8388330c306a930ac1c69446ad66921dd6b99547c20867116770201781a6e0a1ff496f3bdf55811983d1966205ec94abf433e20f7e7a1e9

/Library/Caches/com.apple.iconservices.store/D4479113-62E7-3711-99C5-17DB23A166CC.isdata

MD5 d22619fb71b0152a100eea703c279efe
SHA1 92e14b1c6cbfdeeb681f5f2a0765dd322eddc714
SHA256 d447911362e7971119c517db23a166cc9141995dfba92a6c19dca61f3a8b7619
SHA512 0e2f31ec947f83392ec2701d462fabfdf3c39cb985bf98dad71cd23113cb5588e011471b0c83bbc244b98ca32260f0727f8a72c9b38f1938b688d2cf9b4f35ec

/Library/Caches/com.apple.iconservices.store/784B6028-CEFC-3517-8244-93608989C675.isdata

MD5 9e916bde0a01bd5c95f2ff7b0280624c
SHA1 977f54d39bff6532491bd515540aaeaa3e5e1f63
SHA256 784b6028cefc6517c24493608989c6754561df11d2b511030230dce5a61acdd5
SHA512 c59a0673bfcc3ff53a26e2f63b254c19a0cbd46d72304d0070be5911f495e180333e1efb3aae29dfb77f431f9872e94d6e042854edae91807e1ecd739352c6ca

/Library/Caches/com.apple.iconservices.store/2E81B308-DB54-3960-BE30-15D4EF3D7214.isdata

MD5 92b9f1f61c2516cd276dbfd9880bcd1b
SHA1 37218db4cd3115153eb5ab53c0c2a7887e62e387
SHA256 2e81b308db54f9607e3015d4ef3d72146f25f87c2cbdb478c11c6a3610d0c305
SHA512 535b52dea7d73e23664c2dd09073a76cc44ba2d8b520bb1e642fc003de7173c34f1b8ddc0b70ef4d2c417a00e863f1b69e2d53787afe70ec332f36238cabd729

/Library/Caches/com.apple.iconservices.store/41E6AE83-0239-34E6-9B30-10C88E4DC018.isdata

MD5 252e59a1e2bf5a0930de421dafc0b40a
SHA1 fc012a56922a5e849dbf117bea7d9061356b6c1b
SHA256 41e6ae830239c4e61b3010c88e4dc0189cb514c2f6dcc3ac41f2624e6741e4fe
SHA512 e5577628cdb2bebc30af066cfc81cc31d07ab7157247a7ba7f73bedfda598e5cc8317a66e12c12bd338431539cecb34346bbc4ed156fb2a63b34e9d91584ac2e

/Library/Caches/com.apple.iconservices.store/38144A36-E1B3-342D-80CE-E917E94A6DEC.isdata

MD5 443a74fc23a763f722ca7dfd6d26a164
SHA1 aa130e3b5974809a72f2106d182cae4da189d50f
SHA256 38144a36e1b3d42d80cee917e94a6decd331a103c5f856a8d69b31d8d058e33d
SHA512 8b92a064d5554a8fa8ea91f1f53ac3b2016b01ce99b3c474bf6e50d8bca20b416675c3689c74ef0a8f474d708a61a877c9a414a48e281a6b81107475f876c7a6

/Library/Caches/com.apple.iconservices.store/13C5394B-81CC-380D-9F81-5396AFF88B65.isdata

MD5 97941e4e0afe65b2cfc3885e9f024393
SHA1 641c5fdf21ac539ac1e3d1150370ade9d8d252df
SHA256 13c5394b81ccc80d9f815396aff88b65474a84322dde3343b5c122f57c82142c
SHA512 c438f6e2989f629fbbb9bc6efee47394d598328e6fcebf8ede34099b1c01b05ee9fa8a0a4ccad32367684e8241df54bc3fdb5894770e5d72174b89b3ffeda420

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 5e13ce56006e2f1f1501a88a1c2702af
SHA1 0e6b957d45f20a46308faaff22ef779a8d585c9d
SHA256 f82723282f4114841defa368d3cb842bf89b3a1066421bce9fe0bbe301c75311
SHA512 e338e55847740437b3c355c3076d9bbfa671a24eef83418e8b3f1be8bd813312ae10977fc5fa55b8548c7bca4a2c0e558cd27a45c0e797eddf03c897a8d5f82b

/Users/run/Library/Caches/GeoServices/Experiments.pbd

MD5 0dbaccdd671d4a114e6e1189bef310b7
SHA1 8e03feb3483ff2d929279fff630f8f1ab092553d
SHA256 ea09ee1c6ad56d1df1e955afd169b16d9f1eb6e140a04344f45adad65e93d819
SHA512 79058870e88c51df0b46d64293e163a829f627e15666761217d5f1657c9570ff1ebaf6a4b314e33523fefb5904a17c1059a8647a9ec61456db102bc89c48aaa8

/Users/run/Library/Caches/GeoServices/ActiveTileGroup.pbd

MD5 2ad2862170ecffa776b030dc2c41e32a
SHA1 c57805a57f323e545a73deff24504a0de344e85d
SHA256 948c602d37d54720ba868bf3c66caf38cc2ec7c7cfe0cc2dbeca6ccec582e6da
SHA512 1392e12d02984e7c0ef45f820883fb229ddecd973d56f50c775fa4e970adf33f9f98940c4bdc863af75adde0459c63a7c5e414d00611de646b92c7a0761b80ef

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 ff58f5e0231343ec18cfe54a2ac078c3
SHA1 26a415900734cdc12f978b29e3e57dea04f4f923
SHA256 5c080b5e6e1ca724c0262a7a46f915e9d42e236626d1f6919f5ec4ebbe07d461
SHA512 2c7994a049ec61d7d3d6c591b5004a10f18c06e5451070b9ee3924655c1a26945a29fc758a446c9c90fd4bdae1d9d9b38199f4f7b2279f54da9f8055aeb8c296

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 cfb570268b636815b6bb465ee4d99009
SHA1 3d9c0c0a7bd65a43c48e541ba2b47e2d48d7da45
SHA256 750a7da2fd05d3c656d2ffbb9ae6a7885e2cae808600aea76918035defac47df
SHA512 967dc0474e2e612fffad002aaf7813810b2f1160977b6984a2556fb1f8e9e5cfbb96b44535fc39bad147786d8820e516eec30a87a9f98616572bec19a7ed05c4

/private/var/db//keybags/persona.kb

MD5 fe98de1f0965bccce0fcadb71649a979
SHA1 62e9364a03e443ce12c1c40366858575bb8155c9
SHA256 00a28bdb02683adfcf865f9d2ee95b56c4747c58ef3525d0ade5af2572a5dd9a
SHA512 6198969310b01d3eca60e12b6a4e79bbf25a139b9075ea52392edcc23ab34c28211f7341fded82f703364c262613dfe3097459f728ffbb2d5f3cfd2c23722037

/Library/Caches/com.apple.iconservices.store/4C6E7AD6-2383-30B3-8439-A559667BE748.isdata

MD5 8b8d403af81465f181906bd26a3c7b61
SHA1 c4b3e3047663faa91af287c891d635b4b457cb3e
SHA256 4c6e7ad62383f0b30439a559667be7480f319a4a1a63ec69ed764b28af2b58f6
SHA512 22872eef3d0d4c60f42812b0f1748dfc053c496b38bf8ab4e68d999c5103c964da3db090d82bb0eb515b91367328fb431019c98e1f7fc9ec8d303357098c2ab4

/Users/run/Library/Preferences/com.apple.security.KCN.plist

MD5 1aaef56e180dcd97f10d66471bf8cc1b
SHA1 f3cc1b50e6a76b45426099fff3d9e87a51fc3bb1
SHA256 d46986f678febeec7ccd4b620c425446a6f2e9426b7bf6c1c7a912dbf8af27a8
SHA512 121b718f817b6478a7a50a331bd54c8c2700945098f1af80a4e4e83fe643fabc1341624c9e2e39a74a9b3eb7361cdd7a0d2b0842e52945d753f37ee57adda319

/Users/run/Library/Caches/com.apple.helpviewer/fsCachedData/FBE3A0A4-174C-43E8-9DE6-9567FA828C52

MD5 ab7394604385d973c3bfe77d263db386
SHA1 7b9f8b2de103ed4b5077d57f166a6989d43aceb8
SHA256 b26a2ae3ce9f05b4af33ab5b1c3bb6446eb87c3f15c5e46692e8bac4bfd0c157
SHA512 eb575dad748a9f5ad8280dff68b174744bc7f116a57323ec5a61756ed5ed7a61d0adf24560c9421ef79b547fcfff7743ae321892eb7a8614a207241e9e636414

/Users/run/Library/Caches/com.apple.helpviewer/fsCachedData/4351FE9F-4CB5-483F-9ACE-CE8189109EA8

MD5 8ea2ff7ffe5054dd29ee967adedf85a5
SHA1 ebdd828185deb5b47e980d4aaf76deb6885096a8
SHA256 8d5c351fa02c53f06f845bde71301f4e143d3f9bb04780a9ca4fea89e985755e
SHA512 12c60875b23781a51eaaed7a78157ba25595cbb0535422a299fe6de128824e208db1de81aabf91b465be77629dee9a4ecd0ccc9199b67c471053dfaa7a6ba2b2

/private/var/db//keybags/persona.kb

MD5 45470925605843090b70a58026b0aa31
SHA1 dd267ff58a8c0401e701735fea784657ec5c49cd
SHA256 773f492fbd23cb2e16a6f336ca9a931b86bb50fcb510b58eec0147eb3fa8daef
SHA512 e52e9a24da527a5c0e8529f9511525b2908f196b9422cd5a76604208635ed513eeaf0b6be672691713d32f37138f0e0774a8572e863c3e3cc3f7eedd7a79b03e

/Library/Caches/com.apple.iconservices.store/D186CB94-9BD0-3FC2-B8A2-A39CAD9C27F3.isdata

MD5 7f8fb36a0ca80c6fa742d8b3e76896f2
SHA1 223b23b7248f5d5216ca6162b03e8cfcfad9b78f
SHA256 d186cb949bd02fc2f8a2a39cad9c27f3eea2e37cc8b1607de66db378b979370f
SHA512 40786a3adb88cad0eb9047d0ea737c0e831a34dce63ba62e593b6d55cedb00484f9b1e01be8e95330596b04610f594b5fc22a2ae000bcbfeb1737e883d4b07b8

/Users/run/Library/Preferences/com.apple.security.KCN.plist

MD5 121fe2a10ed598ddd963bda71e5a6def
SHA1 93d118c6ef664a88a5267d48c8aca3e8918b74ad
SHA256 b11b82d0ad16b4c1c9fc2afc74e16a587d1debcd677313306d30f8482196427f
SHA512 be0fbe8111d4745c2b16fb03eb9c2eab1eedd6f316d2aa8e343ec80e93b3d0696381931714107a4bdd158a4fea9cc5895e4babde4a941cdd13202281a1d63957

/Users/run/Library/Preferences/com.apple.security.KCN.plist

MD5 50c3c8fe0f4bc4f7f3afc5d9a290df9b
SHA1 e56569ce55404d451fa892846b1df33625df49d4
SHA256 4545a39fdf0296ef4b4193d8bf15b82254f56f12b5dc0f2ccf22f411a3835f81
SHA512 4f741df59a6bafed553b90ff7a06f1dd60c8a0e0797815d45c7514c9ffd8d61da51c4920c5d1bd1d117b8a1e5c9a76ab813814ac86ab3d2612fe58316eddd687

/Users/run/Library/Application Support/Telegram Desktop/tdata/user_data/cache/0/B7/43F3A6D3E7D8

MD5 7de797700d50dbecc8ce065b205d3069
SHA1 fc4b14bbbcc289a878ba1e80626eba6f933cc349
SHA256 c5f59c91cc07c30a61986031e20997b735da0cecc348f6d7342f2a2a14b54964
SHA512 e8176cde5888653dd394ee0251084ebf1f7730d567dbb343382382617e99c9fab716708eb3f995b921b58417f52867b2603102e1811bc26372337ce78774552c

/Users/run/Library/Application Support/Telegram Desktop/tdata/user_data/cache/version

MD5 4352d88a78aa39750bf70cd6f27bcaa5
SHA1 3c585604e87f855973731fea83e21fab9392d2fc
SHA256 67abdd721024f0ff4e0b3f4c2fc13bc5bad42d0b7851d456d88d203d15aaa450
SHA512 edf92e3d4f80fc47d948ea2f17b9bfc742d34e2e785a7a4927f3e261e8bd9d400b648bff2123b8396d24fb28f5869979e08d58b4b5d156e640344a2c0a54675d

/Users/run/Library/Saved Application State/com.google.chrome.savedState/data.data

MD5 b60f424c2b7c7e9a4ab80ff3ca5cc647
SHA1 376b9d0e3a5472cea7af076fa9feed358ff10de3
SHA256 83c58514863044b60b8d8726b5e50ca85865570a303097b57a4000381e1c9d9d
SHA512 c58fbe7ef5d23286b740b0a9c6445e35e7b257f82d486b9bd8f8067b85d3cc2d00b2f858cb36aa1ca34ef0e85b1e0cb3e23b0bc1a85e4c6672a1703b0e5e40cc

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 87e47be400b4e431e2801cb7e509883b
SHA1 ac77f0fcddd9d8ae46d88bed9c64101439a1a6b2
SHA256 a1871469494acfac57bc6ce83301c677d855aeaaab8d91ebb7cae5eeeeeb7f5a
SHA512 36cf667beba041e4d7c2350eb1173296766057730f2b547da12914f5541b397b86deef142ad6d298e6803720610a6365317d5db284f0b1d7a41c9902051eec99

/Users/run/Library/Preferences/com.apple.security.KCN.plist

MD5 96b394339b5c7698d53f046d87f7dd78
SHA1 7cc1abd7d10535c87afb7267da915b70a9bbb719
SHA256 3b7db752a0d56720d0b5082ca40c72334d1c2baad0eab90cc619778ac03bbc2c
SHA512 e6719b2e33e4d30c801d1578b15d3e7f61e94b5219080673b82e14c8144c10cacd1508b6a9f66af8bd3bbd7f6dfa1affc92f5fc370ea486e8c573c68f041cc4d

/private/var/db//keybags/persona.kb

MD5 159d13cea33b87b23f5e438a54b35035
SHA1 25ecf6129e973da16acbd457d20b86daeb0a18f2
SHA256 26ebadd4985bbbf6c4a88461db410c0f88d74f2c12fc982725164bcc069f8baf
SHA512 dcbdeaf444ef3ace18dfcb37e1cd37ac703e9507e0b91a7c2d7beffabed8e0e8bdd2b8cb617a8c1b5c7156148ad1677aec772324701ceab2c823635a2fe30078

/private/var/db/spindump/tailspin-trace.2024-06-15_21-31-12.tailspin

MD5 a97b4a49b384fce327aefad438821f14
SHA1 6121fc15ad062677c9de875bf4df103e8860738c
SHA256 0fa711552eb878e5620d9f4fa57828f39575053fbc5388595e60fd2e68e0b3c1
SHA512 93d53b121d54ee760398084bd064532abeafeb0e6636f0f88808567169364369b1be6a602f0700cb6ba053b50fd3941b5e61a696d646d1eda96744cfb9652fcf

/var/db/spindump/UUIDToBinaryLocations

MD5 5e33731790ccf8c47cdc23e0dde4bddb
SHA1 f9c6f9a78fd3d5b48c5cab135d8cb66c034e6517
SHA256 a8d73584c413e1bee936d1f4c1f3bc36c5a6677211160fd49579ab979f38bdee
SHA512 caff137385405bcb381b0c1fc3c3a9d5dffee2138302aaed91ac315d6f16df6d3bbe1169c47e577c9c01f6b95a0c5f92367e3dc6fd24d9b6d0776aa53425f093

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt

MD5 e7e706d1682598656700c827afcb3e2d
SHA1 a61a78de741979348b6c447336cf450e7ca06441
SHA256 5cec3b9b540158e0cc90f07658d52659193097955817a54827909914dc9233cb
SHA512 72182ef6683addd78713fc5a55a88bdefaea62a7e11cf690d744ac89f93286b48996402be3a4d55131956ef8e66e8fd035bc6f33a1016b41943c1118a9c4329f

/private/var/db//keybags/persona.kb

MD5 587de25734b6b3e5cb5da2a4f83c73b0
SHA1 35f749b79b221f91009c3df7842f37dfc686c818
SHA256 9fc018c23e8ea14ec0a8812b902afa776ddb46b1f8cc5e38460789c1c02a25d3
SHA512 b56fae987d367bbc48f65b1ae334cbb20eb435dc0b606e1c4b4ee6153276cb8038ee7cbb423c3459b842e5b5cec5ae5503ba64282e479f28541086cbe45e309b

/private/var/db//keybags/persona.kb

MD5 ec1ada5059f989ebc316fd6d0afe5c8e
SHA1 847f76abd61921b4f21568fed4e44de00e1791b8
SHA256 9dcb32303893dd6aafa348c83cd8fb744abbe7828da37ae603ba765d24fe9cc2
SHA512 46e0215775a23928897a9b3f1a0b4265b96977fb5291e938b80f422f9959e0fd7486bc2da755c0fb1c8d4157ea2596c5cda4d0daa442984202d6478070dd1d29

/var/db/fpsd/adi/adi.pb

MD5 b28598160647b74dccc4aec628215b49
SHA1 eee53b3d2821f4542bf20828cefe707a5fc32ad4
SHA256 5797817e4365c95953872bcc80502aca4a9c7e93ed8135786607abaa4bbe8ba4
SHA512 e6ced3196481e3e3c19e5766fca1b354e8a1f6d49f6f45b901b2df7817a00a585a8352485bee4923dde756a7137f94eb39a0efdf0f5dc1a2a88a60c8d58f53bf