576d51211fa424933b9e75283b5d44d51a9d2c6ea5160c35f4a6bbbf95a4573f

Resubmissions

18/04/2026, 19:12

260418-xwf2aad17t4

18/04/2026, 19:09

260418-xt8zaad15x1

18/04/2026, 19:01

260418-xpharsd13s4

Analysis

user interaction
yes
max time kernel
393s
max time network
395s
platform
macos-10.15_amd64
resource
macos-20250619-en
resource tags

arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
18/04/2026, 19:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
usbimager
Size 730KB
Sample260418-xpharsd13s
SHA256 576d51211fa424933b9e75283b5d44d51a9d2c6ea5160c35f4a6bbbf95a4573f
MD5 5cf17fbe5f18dbb2228e0754cdcc7ac2
SHA1 2119d0103ca5e7cc9dc9951b562b67b8dc4f9822
SHA512 d516eb77c9f57e55559a17812e433527032ffa01acf25dd53401bff4dc405f91ccdbadc1789a9bab733b54c1abb09dba849e490178209de9de4ea167b0a82d22
SSDEEP 12288:so+AGG/06F5XStIVjI6n/fiyQlXeBPyTLjlm82:so+mpn/PkTXQ82
TLSH
T138F41872525D2D17E9F964BF6B4087A5F13CF71028F0E0EE6948A6CDECC970A502B7A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

defense_evasion

Malware Config

Signatures

Resource Forking 1 TTPs 5 IoCs

Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

defense_evasion

Resource Forking

T1564.009

ioc	Process
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper	Process not Found
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz"	Process not Found
/usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist	Process not Found
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded	Process not Found
/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Resources/DesktopServicesHelper	Process not Found

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/usbimager\""
1⤵
PID:475

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/usbimager\""
1⤵
PID:475

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/usbimager
1⤵
PID:475
- /bin/zsh
  /bin/zsh -c /Users/run/usbimager
  2⤵
  PID:477
- /Users/run/usbimager
  /Users/run/usbimager
  2⤵
  PID:477

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:501

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:501

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:515

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:516

/usr/libexec/xpcproxy
xpcproxy com.apple.PerformanceAnalysis.animationperfd
1⤵
PID:518

/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
1⤵
PID:518

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:522

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:522

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:523

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:523

/usr/libexec/xpcproxy
xpcproxy com.apple.DesktopServicesHelper.86BC9709-DE33-485C-9497-C35BA46EFC9F
1⤵
PID:525

/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Resources/DesktopServicesHelper
/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Resources/DesktopServicesHelper
1⤵
PID:525

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.ui.helper
1⤵
PID:526

/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
1⤵
PID:526

/usr/libexec/xpcproxy
xpcproxy "com.apple.xpc.launchd.oneshot.0x10000001.Archive Utility"
1⤵
PID:527

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility" -psn_0_147492
1⤵
PID:527

/usr/libexec/xpcproxy
xpcproxy com.apple.XprotectFramework.AnalysisService 410
1⤵
PID:528

/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
1⤵
PID:528

/usr/bin/macbinary
/usr/bin/macbinary probe --verbose /Users/run/Desktop/payload.zip
1⤵
PID:529

/usr/bin/file
/usr/bin/file -b /Users/run/Desktop/payload.zip
1⤵
PID:530

/usr/libexec/xpcproxy
xpcproxy com.apple.archiveutility.auhelperservice 527
1⤵
PID:531

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService"
1⤵
PID:531

/System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
/System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
1⤵
PID:533

/usr/libexec/xpcproxy
xpcproxy com.apple.appkit.xpc.sandboxedServiceRunner 527
1⤵
PID:534

/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
1⤵
PID:534

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.satellite.09DB6038-35BD-4A4E-B13A-627550D263CC 514
1⤵
PID:536

/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
1⤵
PID:536

/usr/libexec/xpcproxy
xpcproxy com.apple.xpc.launchd.oneshot.0x10000002.TextEdit
1⤵
PID:537

/System/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Applications/TextEdit.app/Contents/MacOS/TextEdit -psn_0_151589
1⤵
PID:537

/usr/libexec/xpcproxy
xpcproxy com.apple.metadata.mdwrite
1⤵
PID:538

/usr/libexec/xpcproxy
xpcproxy com.apple.appleseed.FeedbackAssistant.2152
1⤵
PID:550

/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/MacOS/Feedback Assistant
"/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/MacOS/Feedback Assistant"
1⤵
PID:550

/usr/libexec/xpcproxy
xpcproxy com.google.Chrome.3056
1⤵
PID:551

/Applications/Google Chrome.app/Contents/MacOS/Google Chrome
"/Applications/Google Chrome.app/Contents/MacOS/Google Chrome"
1⤵
PID:551

/usr/libexec/xpcproxy
xpcproxy com.apple.GameController.gamecontrollerd
1⤵
PID:554

/usr/libexec/gamecontrollerd
/usr/libexec/gamecontrollerd
1⤵
PID:554

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler" "--monitor-self-annotation=ptype=crashpad-handler" "--database=/Users/run/Library/Application Support/Google/Chrome/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=channel=" "--annotation=plat=OS X" "--annotation=prod=Chrome_Mac" "--annotation=ver=101.0.4951.54" "--handshake-fd=5"
1⤵
PID:556

/usr/bin/profiles
/usr/bin/profiles status -type enrollment
1⤵
PID:557

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz"
1⤵
PID:559

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize" com.google.Chrome
1⤵
PID:560

/usr/bin/tar
/usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist
1⤵
PID:561

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)" "--type=gpu-process" "--gpu-preferences=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" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=27"
1⤵
PID:563

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=network.mojom.NetworkService" "--lang=en-GB" "--service-sandbox-type=network" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=27"
1⤵
PID:564

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=storage.mojom.StorageService" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=27"
1⤵
PID:565

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)
"/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)" "--type=utility" "--utility-sub-type=mac_notifications.mojom.MacNotificationProvider" "--lang=en-GB" "--service-sandbox-type=none" --message-loop-type-ui --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072"
1⤵
PID:566

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded
1⤵
PID:567

/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
"/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake-all --system
1⤵
PID:568

/Users/run/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
"/Users/run/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake-all
1⤵
PID:569

/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
"/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=4"
1⤵
PID:0
- /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
  "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake --system
  2⤵
  PID:572
- /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
  "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=4"
  2⤵
  PID:0
- - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=7" "--launch-time-ticks=558654688" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=56"
    3⤵
    PID:575
- - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=6" "--launch-time-ticks=558922050" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=56"
    3⤵
    PID:577
- - /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/Helpers/launcher
    "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/Helpers/launcher" --internal
    3⤵
    PID:576
- - /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin
    /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin --productid com.google.Chrome --print-tickets --store /Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
    3⤵
    PID:578
- - /usr/libexec/xpcproxy
    xpcproxy com.apple.SafariLaunchAgent
    3⤵
    PID:579
- - /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
    /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
    3⤵
    PID:579
- - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=8" "--launch-time-ticks=561762502" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=70"
    3⤵
    PID:581
- - /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher
    "/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher"
    3⤵
    PID:582
- - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=12" "--launch-time-ticks=562514204" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=75"
    3⤵
    PID:583
- - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=10" "--launch-time-ticks=563041684" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=76"
    3⤵
    PID:584
- - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=11" "--launch-time-ticks=563523047" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=76"
    3⤵
    PID:585
- - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=97"
    3⤵
    PID:586
- - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=14" "--launch-time-ticks=568454748" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=75"
    3⤵
    PID:587
- - /usr/libexec/xpcproxy
    xpcproxy com.apple.spindump
    3⤵
    PID:588
- - /usr/sbin/spindump
    /usr/sbin/spindump
    3⤵
    PID:588
- - /usr/libexec/xpcproxy
    xpcproxy com.apple.tailspind
    3⤵
    PID:589
- - /usr/libexec/xpcproxy
    xpcproxy com.apple.spindump_agent
    3⤵
    PID:590
- - /usr/libexec/tailspind
    /usr/libexec/tailspind
    3⤵
    PID:589
- - /usr/libexec/spindump_agent
    /usr/libexec/spindump_agent
    3⤵
    PID:590
- - /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
    GoogleUpdater --server "--service=update-internal" --system
    3⤵
    PID:0
  - - /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
      "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
      4⤵
      PID:1.8446744073709552e+19
  - - /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher
      "/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher"
      4⤵
      PID:594
  - - /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
      GoogleUpdater --server "--service=update" --system
      4⤵
      PID:0
    - - /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
        
        "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
        5⤵
        
        PID:1.8446744073709552e+19
    - - /usr/bin/profiles
        
        /usr/bin/profiles status -type enrollment
        5⤵
        
        PID:598
    - - /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin
        
        /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin -P com.google.Chrome --delete --store /Users/run/Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
        5⤵
        
        PID:600
    - - /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
        
        GoogleUpdater --server "--service=update" --system
        5⤵
        
        PID:0
      - /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
        
        "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
        6⤵
        
        PID:1.8446744073709552e+19
      - /usr/sbin/system_profiler
        
        /usr/sbin/system_profiler SPConfigurationProfileDataType -detailLevel mini -timeout 15 -xml
        6⤵
        
        PID:604
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=105"
        6⤵
        
        PID:607
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=108"
        6⤵
        
        PID:608
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=113"
        6⤵
        
        PID:609
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=64"
        6⤵
        
        PID:610
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=70"
        6⤵
        
        PID:611
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=21" "--launch-time-ticks=588258299" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=118"
        6⤵
        
        PID:612
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=22" "--launch-time-ticks=588337272" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=119"
        6⤵
        
        PID:613
      - /usr/libexec/xpcproxy
        
        xpcproxy com.apple.ReportCrash.Root
        6⤵
        
        PID:614
      - /System/Library/CoreServices/ReportCrash
        
        /System/Library/CoreServices/ReportCrash daemon
        6⤵
        
        PID:614
      - /usr/libexec/xpcproxy
        
        xpcproxy com.apple.ReportMemoryException
        6⤵
        
        PID:615
      - /usr/libexec/ReportMemoryException
        
        /usr/libexec/ReportMemoryException
        6⤵
        
        PID:615
      - /bin/sh
        
        sh -c /usr/sbin/kextstat
        6⤵
        
        PID:616
      - /bin/bash
        
        sh -c /usr/sbin/kextstat
        6⤵
        
        PID:616
      - /usr/sbin/kextstat
        
        /usr/sbin/kextstat
        6⤵
        
        PID:616
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=119"
        6⤵
        
        PID:617
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=119"
        6⤵
        
        PID:618
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=119"
        6⤵
        
        PID:619
      - /usr/libexec/xpcproxy
        
        xpcproxy com.apple.mobile.keybagd
        6⤵
        
        PID:627
      - /usr/libexec/keybagd
        
        /usr/libexec/keybagd -t 15
        6⤵
        
        PID:627
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=121"
        6⤵
        
        PID:628
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=122"
        6⤵
        
        PID:629
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=122"
        6⤵
        
        PID:630
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=122"
        6⤵
        
        PID:632
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=122"
        6⤵
        
        PID:633
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=121"
        6⤵
        
        PID:634
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=106"
        6⤵
        
        PID:635
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=106"
        6⤵
        
        PID:636
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=105"
        6⤵
        
        PID:637
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=105"
        6⤵
        
        PID:639
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=106"
        6⤵
        
        PID:644
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=106"
        6⤵
        
        PID:645
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=123"
        6⤵
        
        PID:650
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=123"
        6⤵
        
        PID:651
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=106"
        6⤵
        
        PID:652
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=41" "--launch-time-ticks=637531685" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=124"
        6⤵
        
        PID:654
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=42" "--launch-time-ticks=643739151" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=124"
        6⤵
        
        PID:655
      - /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
        
        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=chrome.mojom.FileUtilService" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,15842561835598941617,7873355720966333106,131072" "--seatbelt-client=123"
        6⤵
        
        PID:656
      - /usr/libexec/xpcproxy
        
        xpcproxy "com.apple.xpc.launchd.oneshot.0x10000003.Archive Utility"
        6⤵
        
        PID:659
      - /System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility
        
        "/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility" -psn_0_180268
        6⤵
        
        PID:659
      - /usr/libexec/xpcproxy
        
        xpcproxy com.apple.XprotectFramework.AnalysisService 410
        6⤵
        
        PID:660
      - /System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
        
        /System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
        6⤵
        
        PID:660
      - /usr/libexec/xpcproxy
        
        xpcproxy com.apple.secinitd
        6⤵
        
        PID:661
      - /usr/libexec/secinitd
        
        /usr/libexec/secinitd
        6⤵
        
        PID:661
      - /usr/bin/macbinary
        
        /usr/bin/macbinary probe --verbose /Users/run/Downloads/usbimager_1.0.10-arm-macosx-cocoa.zip
        6⤵
        
        PID:662
      - /usr/bin/file
        
        /usr/bin/file -b /Users/run/Downloads/usbimager_1.0.10-arm-macosx-cocoa.zip
        6⤵
        
        PID:663
      - /usr/libexec/xpcproxy
        
        xpcproxy com.apple.archiveutility.auhelperservice 659
        6⤵
        
        PID:664
      - /System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService
        
        "/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService"
        6⤵
        
        PID:664
      - /System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
        
        /System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
        6⤵
        
        PID:665
      - /usr/libexec/xpcproxy
        
        xpcproxy com.apple.assistantd
        6⤵
        
        PID:666
      - /System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
        
        /System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
        6⤵
        
        PID:666
      - /usr/libexec/xpcproxy
        
        xpcproxy com.apple.appkit.xpc.sandboxedServiceRunner 659
        6⤵
        
        PID:668
      - /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
        
        /System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
        6⤵
        
        PID:668
      - /usr/libexec/xpcproxy
        
        xpcproxy com.apple.mobileassetd
        6⤵
        
        PID:669
      - /usr/libexec/mobileassetd
        
        /usr/libexec/mobileassetd
        6⤵
        
        PID:669
      - /usr/libexec/xpcproxy
        
        xpcproxy com.apple.secd
        6⤵
        
        PID:670
      - /usr/libexec/secd
        
        /usr/libexec/secd
        6⤵
        
        PID:670

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

happymeal

Path /Users/run/Desktop/payload/happymeal
Size 3.4MB
SHA256 9660253445f7637d98d663c855a9c18a59e921de127df607e1781d2b57486431
MD5 176fd682841c1bf121d5d31ed4e79ff6
SHA1 4cef56665caa85e9ea0c6cea82b1bd7fb3c93392
SHA512 34bcdc43bf91af165df72f49f73cbdaedf0e02daa272ce4e19cbf2db00ad203879c02f90626d75299d4d87628bf8a8d3c5ea8ffb013e43f1a8070e107c16e068
SSDEEP 98304:IvIn+nQS+B2qRE0k4LQLV/4HgVaAjq4kgNUebP5/sv:IAn+nQjBNLAhauvG
TLSH
T177F57D17FCD144A2C1BAE1344A92A75277717C6D43253BD71F90AAB93A7EBE42A3C310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.json

Path /Users/run/Desktop/payload/settings.json
Size 478B
SHA256 f9169b9b0d3706f8622513a6be8a722cdcef97826f1e71476439cb387792416c
MD5 b35182a5d0722d6f81654bbf9755bb77
SHA1 05203798855cfdf6f32161189ee340efe27386fb
SHA512 584f5d1afd86c2492a344447039c34b2239903af5b27590371226a13bc8668afa106af8bbefcfd75ed61a247ab251c93c51ce8192347b6d5ac53bf2b44bf89f9
TLSH
T19FF0A34AA4C0867F324985F58D3065367B17019F05841F59D59D7F70D2F4EB37E16242
MD5 SHA1 SHA512 TLSH

Submit Download

Unconfirmed 388516.crdownload

Path /Users/run/Downloads/Unconfirmed 388516.crdownload
Size 45KB
SHA256 e13962996f2a39573a99222e6791a1fc9dbb7aa4d1f15babda3cb1da5a9e4cd3
MD5 1a013ac50090c3ebb7ec04c69cce5438
SHA1 4a7c4a3436655d7d15b3acd0e64b937619bce336
SHA512 e8ceacb6002a525ed6ff309d0d36e1b981ae61cfe6977c32bde489b2736fddd90d672442a2c115aa768cde7bad1d335206cf55fd90e8521798e11e62984c0ffe
SSDEEP 768:xvYZLEOxufXfW+8gP+sdBmYsqbsTtAu7OhFEitkeYb7lDzRLkNSfGtnOrMMcbq0n:xAxEwufXfW+4CsYj8lOhxtkeYb7lPxkz
TLSH
T1502302990EABDD61CB79DDFA82E41E43179A6ADB907283A3095C0139349FF5E43C4707
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 388516.crdownload

Path /Users/run/Downloads/Unconfirmed 388516.crdownload
Size 276KB
SHA256 29100e1ff7585381d7bf497f79232c19d8d60f5f738c870476bfaafe6235b89e
MD5 99be322f446eb17002001cf83d9cd9fd
SHA1 d5b395e3d8ead2d9811e59ae5d6d22f011429269
SHA512 f5a70e178a8aee8253b4303573c432e3e0ac3c3ab201ccc78d8b0c9e6797e95695451ae9989c5e1bcd691bdc12831b95199643476ea2b6cf108e039cdc01aef6
SSDEEP 6144:xAGfz4dqP+gSSt2gW/wWs4UsD0DwwmdJHadIlG4G4sJpMi98:yGfziRjgqPUsAwladIlG4YS
TLSH
T18D5423FC8F9B9456D311997B31D23E16708B89C3702E03871B18A73999BB78247DC6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

visual_model.tflite

Path /Users/run/Library/Application Support/Google/Chrome/ClientSidePhishing/29.0/visual_model.tflite
Size 3.0MB
SHA256 d38a4cda8912f9598b8701dac7d5ee90eff324ed1fb9d277b9784fe45a4e6c72
MD5 a9803d560544e4d1fe551b2c113c5370
SHA1 a998fdb1e80dbca61267db112812a7ee34b82dce
SHA512 65b8b6ecfea2aeae95a39581c39476a54721e07ee7c296650ccddea29a09b29a11cab15fdc89f97295bd61423dc13a66666faca371200bcb459dc1f25b6c89fd
SSDEEP 98304:0FkQ8+nTgV11233hz/v/U2P6tObWAOz+O2la+Ao:T+nMV112lU6b9O2rAo
TLSH
T1CEE502A5B811F1C2CA19C6729B56FF6F48317C265F05D027320DBB4D48B22EB8F4A6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path /Users/run/Library/Application Support/Google/Chrome/Crashpad/settings.dat
Size 40B
SHA256 5cca682cfa80faa97838327d83ef5a2cc39e21b0cf16639aa7c4f095bf1be4e6
MD5 fcb4024c6dc53a5b72c492fd960762d7
SHA1 82c43024d9e274bf2b8a5d1e505d65cf3873fb92
SHA512 5373007f40ec378d18770218163ffc2870036bf8c0af1128194a60c6ed6d944f2e3833bf151fb5bf4aee9325c1fbab56bacf3f6437daaa59efb0afdc5c5eed8b
MD5 SHA1 SHA512

Submit Download

874bf587-4ec4-4427-88ac-ea73fe37f08e

Path /Users/run/Library/Application Support/Google/Chrome/Default/Download Service/Files/874bf587-4ec4-4427-88ac-ea73fe37f08e
Size 258KB
SHA256 8d21fe1bd251856bfaeaedd6a72ab78f153a047b6042e0fc614f57a32b56d340
MD5 5adf364735dcbe6bf26ebe3f705c9dbc
SHA1 a891521fea2f61a2fd16ea9f0a3fc3c2c5fb3a46
SHA512 5f77f8923ab3800ab754f4c60095077b529c5f5f230c6a0b6803dc28597f42ed682921267ed344e190d0f08e0a23eceace7bccbc9d22432029a3e6f4838420e0
SSDEEP 6144:771bE8xvMX08XghZNhvfhua/I4dMdYuw4/xCRxQkdE6oO:7p1xE3g3Nhvf39dMNxxyxGLO
TLSH
T12B4423A9480AFA919B0236F2BF61D07C234649142C9E2B9DDFE48F70E7FE715658F108
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 367149.crdownload

Path /Users/run/Library/Application Support/Google/Chrome/Default/Download Service/Files/Unconfirmed 367149.crdownload
Size 113KB
SHA256 d493065aedcc2b4c5f505957f7a73b9aa0fc64d996db8112de273daa131a1b6a
MD5 2db21110151400d58825133311676435
SHA1 85cc3c5ad0b8ffc34a22706c5d468b706d465c8b
SHA512 ee911271e081b4740391cd8998a15dca8a7697bb1b0183b48f346f0873247681fc69496530fd1fab8e1d5e880fe6ab9c7c1119c7fd144d3d80df3c39055b7616
SSDEEP 3072:7Kalx+YKNI4gF4mXx7FVMgduV7Y8NTJMJhyROMiROelt2WhF:771bE8xvMX08XghZNhF
TLSH
T133B312EDE01BEA725E633A973F12D01C8603042658CE8B9DE7F88B34D578E9E2D5E154
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path /Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path /Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

craw_background.js

Path /Users/run/Library/Application Support/Google/Chrome/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.6_1/craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/Local Storage/leveldb/000003.ldb
Size 339B
SHA256 9cc80c0d1dfe7205c6530402c3240171966e72b6df8ef0e8571660fb18652cd5
MD5 61a867b6e4a24cfcfd32ddef25ac3229
SHA1 87cc4516fbce1700174d8ea27c9d2cb70a60a1fd
SHA512 3678cc5f913c7f6c179be8d8483240a1c9aabbe5b295d6aa2b8037c60a8f2aa473f1fb56a7ee7093aaa8c24b968d32fed99972f6f837868f86b53b45de13f4dc
TLSH
T115E0C2FB0A4984C1E9519BBB2524371D7B25CA2AD9448BE38E48E2528A284616609468
MD5 SHA1 SHA512 TLSH

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/Session Storage/000003.ldb
Size 569B
SHA256 b7600cfe0aa091e9ab8540869b7ea120a62b36240acc0370c3fd62655b58bf4e
MD5 b5db1f091948de93d7fc96e14aef6da3
SHA1 74745f991e3dfe45037366e55c2e6df47d8e6593
SHA512 d116ffaa01fa29545758fbe273c10d57879a91983d6b5a86ed410a0ac79cc8370fd2552284afa56f363a75ba6a89cc5c9a33f99071012dba2f2f8298ad0cac34
TLSH
T157F020631A2BD8A6C868A8325C94270C23A78F0D47B8865B6231CA301D668113A148AA
MD5 SHA1 SHA512 TLSH

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/000003.ldb
Size 269B
SHA256 241a349a63252a8026016a5ef0d713fc18f76735dd0c10963f9a693bfdb9b172
MD5 6487e04972ecffd0aabf7b61bdda8119
SHA1 26f0b11a2529a35f6970a914deadfcf2e2d23286
SHA512 44db500fa4549808a5ed1db5516fe4d412cc4e3898d102399fa6f467a2ed3fa79f133a0afcc5e1ab91f480267027ea11e48e37247d24513542286310ab2d47ae
TLSH
T150D0231426B7C48FE44951B165C35F64736CF459F5154783561865E44F3F0043D44174
MD5 SHA1 SHA512 TLSH

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/Storage/ext/gfdkimpbcpahaombhbimeihdjnejgicl/def/Session Storage/000003.ldb
Size 141B
SHA256 085c44dfa11e65ac3548c4d0fe1ae641570f90c7caaa2881c3990efcf555e6a8
MD5 38fc535a8f11d7e955ef58cc63158eff
SHA1 c45ad3ee106dbfb65dce7c09b53140f34454cd0e
SHA512 26e70000f77c1b6388dd470f9d7ec6bedc4fc3c43e48efcc853812eb076108bcdd9f50f7a89265e431d33df96e71755ca242dfd0aac16a51d99dea50a5a1e505
TLSH
T187C01210066B8863C417737106C417501310E8A40006471316C233600C740311F1045A
MD5 SHA1 SHA512 TLSH

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/000003.ldb
Size 136B
SHA256 935d36c021d0e08a5648c622f3f6fde376e3310013680ae598c0e22dc943d132
MD5 fe382e791274914bee5950777e4f1fd3
SHA1 53b523b5fc87e66f2520a0b5f9ea080072668f4d
SHA512 a5f608fb4f0a1dbc4c5d1b739b1a5b6f50cac1d6a61312b19abf9f601882a291d73524ac55bbe183e4e64db8dcc203d4bf3cedc734fd04bd448cb825d98d1e67
TLSH
T156C012480B948CC3C9009736082443141301C920F72CDB434381B2A10D740CF5E00085
MD5 SHA1 SHA512 TLSH

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/000003.ldb
Size 2KB
SHA256 18b5270537241fdd8a8de2f4435bb9a19acc82d565bf629678c07360e0fa89d8
MD5 e0f65ad85a40a32fa91e551005e193ce
SHA1 a145766d5df23ae5fcd23dbb6937606f280f3502
SHA512 bfcf2075ba3d99c6bf4840d6c7754668ac65e7b88aced5c727f99de68940783424b6e9755b4d90c28f489f87d88eda0f2b5194c292c7bcd0cebcb6a66adb2425
TLSH
T1F44164D3BDFD4BB2ED447E70D12ADB5C1015C6BE00564E0FAAE5A53C9274DA104F6076
MD5 SHA1 SHA512 TLSH

Submit Download

000003.ldb

Path /Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000003.ldb
Size 288B
SHA256 79b1150f1008ed3fbde59417e9727bce33a34ee2ac5b407eec1a82beabdd2c06
MD5 b47a44bdd1b765b6af56b347447fd1b7
SHA1 8599a1870656af91e432bb35e3497863e34ddfbb
SHA512 bfa1d967125878a40068e4d5ec4a4bed4f211373ef2ca839a51cb9a29d2da5afcc65755134af2ae732dc03391a636fbb222b4ae481315e4213ceb8d74797c9f0
TLSH
T129D09520FB93C021D7C0137D4D301F4C170555D1D5067759D43FF5642C74001784D430
MD5 SHA1 SHA512 TLSH

Submit Download

model.tflite

Path /Users/run/Library/Application Support/Google/Chrome/OptimizationGuidePredictionModels/a583e148-1053-4c90-9df7-7c0aff42e6f7/model.tflite
Size 382KB
SHA256 a0956386dc64fd9f4883c8741f950cd60a56859616b159c9e4251c9eb0ac5534
MD5 6d7c2f9e94664539dec99b3233301b01
SHA1 85812b004742cc1c211c92911131ce270f8ba769
SHA512 4d06917f30651c3bf13c509aae79793b3f1ec93de12179464b18fd9fd16c7bf466884b1c70e425d7e937adde341cf24bd08f19a132bbb9683e804f29b4ed0c33
SSDEEP 6144:4i8mNiZGi+jiwubrNEOB37+rNiyykvXpqQC7SaPGNFzq/RnfAmn+qGk07U0z9zMl:WqEGi+GwGrNv9+r8bkvXpqQMLuNy5YmJ
TLSH
T10584C013460497BAD7FC237684C31D9E12A5F2625E73B86BF9363E464811B1BE62237C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ruleset Data

Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.32.0/Ruleset Data
Size 138KB
SHA256 fed1557c8b4e40813114db3b546c043105892dd0895c4d7c02d45a8be351173a
MD5 132df2b999906be7b21cc21bc247b068
SHA1 0665be201a96e717410a4e61a263bb879b3f08d4
SHA512 6764c8a425cd010a67a4636f812d43e63bb0815943e9839cf9fa35f3e5f9ba52309ed842306dcffe32a72e7019cb0c28e1d402dfc22dca0603a0cd48d6a26451
SSDEEP 3072:nAwq4WU8BNptWsfvaWSzpjNSIy27mElP6vUGyA:nAw2fcFty27Js1
TLSH
T14FD373937718C4A2E391913A97CAC72145B2F7D9E487E6F779E2034F3C452B22F1468A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ruleset Data

Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.66.0/Ruleset Data
Size 239KB
SHA256 8bd2881a3c4f04b2f5b37a0412d0d49ba8e60ec161cbd081873702a9bc414a67
MD5 2c3404435406c32565958b727fecc135
SHA1 5fde19ed463527f185ff529cd82cd4bc57ade62e
SHA512 e09975f73942ffb5f517b3278755726110cee851197e5710a1475a631440256d38b6bf86415b277a1f8040575d009c2c483428b1759057f0d640fd12393f32df
SSDEEP 3072:oEwQq7HO45F5QljKsLyUFTr5MQcM3L8wguhiTmbYExWa/X2bAg4sJnqkHm5Q/i6C:ZzO5QkGTVMtkYEVcn0c0U3/y
TLSH
T10734C456631CD511FBE1023B00E6CB226720F7E26A82E6EB79A4534F3D4D6B72F1426D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules

Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Unindexed Rules/9.66.0/Filtering Rules
Size 150KB
SHA256 af35005e4a8aaf1f635d391f8fceaf0efd325adc0cc59913335a55180c90b37a
MD5 c562e85bb64dda68d17f9662fb306f9a
SHA1 70c7a832dea559bf260e37a6ba30b51577075050
SHA512 e6b6cdb159b438de025280fc28044d4fc33c09d839b2086202699b5f445c1422e63ee43418ba7d1df1b89c5bdacd60aca054ad777c69f24407817c3a31cad420
SSDEEP 3072:Yk1RCW31qAY6vjZmC5dgBS85/cCrhE0YY8CY+wtAkjUUUQNKS2IPv7:YRWhjpToceY7
TLSH
T1EAE33E176215F0F10EB60A3E148AAD9556A032E543D7FDF18A29C38DB1F468FB2943F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path /Users/run/Library/Keychains/login.keychain-db
Size 114KB
SHA256 5e038d7e3293daabf12eddff8a9adf3de242a53beba22f22cb7c590b99523df5
MD5 038fe5d4bb7c6c3d8ba7a9d4f94d8510
SHA1 fad78ec41189d1a18a2d30bf8b5443553c11a2a9
SHA512 34a173b53241910ab54d82897258cc19159ad2077861e2e27b75eb3561a9d3ab416b6aa33cd970e0425cac20c467e1ec2478a64e9743497c57f08208d29603ef
SSDEEP 3072:kZr6c0dcNayr82FwVB46OZVhTLXS/iROPQrDQkbnoLEsnoXAKvkki1GtDPgijXmi:kopChJQk
TLSH
T1FCB393825B95ED75C05505BDF9B3A308B335D6AB97A3638733A0A483AC122E40F75BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path /Users/run/Library/Keychains/login.keychain-db
Size 114KB
SHA256 f67988643d227d55f51f49d281cbda80105d7b79ecb98403699cb378113e4d55
MD5 1152759d5759f7eb7bcb0a61f9d122ab
SHA1 d06f35546e7aa4ddc3792f9a792ced4e4846aea4
SHA512 2937d74eff129764df56d40714788b94a748b61f7e63a554def091517c3d56aedd3b9db78e3e92a1bc19b0de182c7aa10887499c5cca841bec71a80a7de720ad
SSDEEP 3072:EZr6c0dcNayr82FwVB46OZVhTLXS/iROPQrDQkbnoLEsnoXAKvkki1GtDPgijXmt:EopChC
TLSH
T149B383825B95ED75C05105BDF9B3A308B335D6AB97A3638733A0A483AD122E40F75BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path /Users/run/Library/Keychains/login.keychain-db
Size 112KB
SHA256 63fc153a9bad0d4527494ea9aebc3ad4b091a3a6ea44592e5a29129843bf29bb
MD5 55edc7734a4cec40220408e260a8dccc
SHA1 309774c196d31a1c54c0541a1dd2378fd182de50
SHA512 805b2acd8a4e4ad68999af2a2732ac5789389a49313dc2cea6eec00f1e467e45dc5b43d8ff24b515eb680a2e61def845f6c898246b4c3306c2b7927635aaa160
SSDEEP 3072:hZr6c0dcNayr82FRVB46OZVhTLXS/iROPQrDQkbnoLEsnoXAKvkki1GtDPgijXm1:hopCUO
TLSH
T15BB383825B95E971C05605BEF9F3A308B335D6AB979363873390A483AD122E40F757EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path /Users/run/Library/Keychains/login.keychain-db
Size 114KB
SHA256 923e284aa8a24d1520fab2a886e2a5081991a97e11d98a5c4b8ff3c7756856e3
MD5 a5af0f74c56376dc0f081162670b2557
SHA1 2724397f7242553086abb1a6396aecfcc6b47930
SHA512 df05a44badecee0942d1ab48b007ad756f0981e748700615e20de62a72fa9b8faed995ba2f9b165aecee338b62827f2d32e180c2ff4d6dde7c7f89eac9af327d
SSDEEP 3072:lZr6c0dcNayr82FkVB46OZVhTLXS/iROPQrDQkbnoLEsnoXAKvkki1GtDPgijXmY:lopCV6QB
TLSH
T114B383825B95ED75C05505BEF9A3A308B335D6AB976363873390A483AD122E00F75BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path /Users/run/Library/Keychains/login.keychain-db
Size 114KB
SHA256 6fffa4334b51e85999eba7ec2032860bbce0cfd82300db7547bb0ffaf42b477a
MD5 73b44c5a0fceb4d684290e5d755fbb10
SHA1 dfb604c146931a53958798038922737cb4c68682
SHA512 17a06106e3c5ae7e5e31564dd9b6489503e644e4e325b380be6259b6a5ea68157cb4e0fa7217369bba167610f5228300fc5022904985cdc8e888a2fc3857ca19
SSDEEP 3072:+Zr6c0dcNayr82FkVB46OZVhTLXS/iROPQrDQkbnoLEsnoXAKvkki1GtDPgijXmt:+opCVm
TLSH
T1B9B383825BD5ED75C05505BEF9A3A308B335D6AB9753638733A0A483AD122E00F75BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path /Users/run/Library/Keychains/login.keychain-db
Size 112KB
SHA256 728f7cf059bfd571be20249884048e4fcc1074f358c21c767bda848d3775c9e3
MD5 047cb93593a5bf64f48ad13654a875f2
SHA1 55b48df98bea7cb09080a2b23f34bbda57bec663
SHA512 d7ae4e56dd8c14cf551a4e157ef99bfdecb258343c17ee131079d06bee3b47870c361300a90c511c047264aa34c6254f80a6ec1c567094ba391086f0acc1a090
SSDEEP 3072:ZZr6c0dcNayr82FBVB46OZVhTLXS/iROPQrDQkbnoLEsnoXAKvkki1GtDPgijXmQ:ZopCkP
TLSH
T1E0B383825B95E971C05505BEF9F3A308B335D6AB979363873390A483AD122E40F75BEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tailspin-trace.2026-04-18_19-07-10.tailspin

Path /private/var/db/spindump/tailspin-trace.2026-04-18_19-07-10.tailspin
Size 16.5MB
SHA256 a9ee7ee258f89438460ee3cb40169a42701b25e7ed16b3dfd3c18238fcc5a015
MD5 b605ef92012d11697ef16bbcb11a6591
SHA1 60097e076141663288120ecdbfd7a4679f809b58
SHA512 7b6b977ae53bde0130bc626820700e341b15d797da918846ddbfad0c6505b0c40d3e240326f6bc15172b7ba354103544096e3a664f210ba852d2b668f14fe7d1
SSDEEP 196608:eYW8yQVqtAvkCzqoM0n/NzVbPC+diXhvGouD:ev8yjO+fMhba+diXhvGouD
TLSH
T1AA07AFB5BC469DE0CCE1A9B206F355B309F376F8FE5041FE80967BE75152B03488A296
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon_128.png

Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dirjFbxDF/CRX_INSTALL/images/icon_128.png
Size 3KB
SHA256 4f17efbd974a41d88cb36567aab6bf4586579e78780f00b1826676819e14bff4
MD5 30899b6c4e4a757b8ec6dd2208acdfb4
SHA1 f2c5880a724c6d75cce1b5191e0d82c3bc7de768
SHA512 58539e3f0ad7fef30792efcdbbd955599e11e4261c9946e7c3dff6267e01747354ea3b901c46fc8329f81c68afbeb2d05fe3fcb266bc5948de8befa5b8d040ee
TLSH
T1B3617D3A733F1E1EA655403843096A51F0C1A62454A9C0C56BE3FCF90D02E086C29B28
MD5 SHA1 SHA512 TLSH

Submit Download

icon_16.png

Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dirjFbxDF/CRX_INSTALL/images/icon_16.png
Size 531B
SHA256 0a4bd08db6422f8e7a8a218ef39c1b99a5a675f12697f26be88f9afc2e1f9378
MD5 344554d96e418120bd80ef5de5194697
SHA1 23e141c3a6ce368acc1c299f062ab85914bcb17e
SHA512 7ae38853e5acca479d7fd81d48bb88c671cf4dce63342209bcff045ac581a04b7b0ed48f6c58253db950935c0522caaa4fbc6cf5a25151a8960ba56fc804569e
TLSH
T171F075CE17705C76514D0763D5E535B278614AC642C76AA1500F1A54793BC1D8DC13B2
MD5 SHA1 SHA512 TLSH

Submit Download

mdsDirectory.db

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db
Size 47KB
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20
SSDEEP 384:xSMdGleGkIG7FF3theSMVXBD0tgcNrGB5pBfbouR6/chQOnGqwc2U+v+h/:8MdGleOhpBouRwchQOnGqwc2U+v+h/
TLSH
T19223BE475BA4DA72EA90357B903363BCDB69F667C346132F465CB0AB4C121802E6FD9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mdsObject.db

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db
Size 4KB
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818
SSDEEP 24:mFkXs98w/mBr53CEb9ujBbCYoVeA7uBEUMy733Ka2VCneWHrUZRJkWnJI4FNMOQS:m6Xsh+CLjL3Pe3T5FFEfEn8xiYuuSsS
TLSH
T1B6919F479BA86A23DD90357690B3677CAF29E693D347031B428CB0968C122843E6FDDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obedbbhbpmojnkanicioggnmelmoomoc_20251024.824731831.14_all_ENGB500000_lof45en2yrc2tvvdfc42hhgnkq.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.38I672/obedbbhbpmojnkanicioggnmelmoomoc_20251024.824731831.14_all_ENGB500000_lof45en2yrc2tvvdfc42hhgnkq.crx3
Size 7.6MB
SHA256 95ff39d8ef1186d8b10dd3a57c6a4a426732b5fca36bdea4670fc4eb0f0b04b5
MD5 f33b5f649851bfaa5e3a9f813b586b1e
SHA1 d6b346fc53489779f07ce1a220e38d62a89b89dd
SHA512 940cf34538cf387663ecd8124e370dc5c95504bea41247ac0766088288c68ce53489a20ee7182a03dc99e5559e034f3a005b73c35f6dde6f3a9e5151112ab1ca
SSDEEP 98304:WBMCyPEP6vKwEHDrIq34e0zBNMv4XCq1Mbrp9hsvwxId1C+c:WpyPxCTIFNy4SV8YxG1S
TLSH
T18E86DF2DB774101B0DB61319D4471753A76A80D9C3844B5C91E8EEAA36926CF82FFAFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gonpemdgkjcecdgbnaabipppbmgfggbe_2025.07.24.00_all_hou4jz7zmeg5zedchpigdjxhve.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.4OzDRm/gonpemdgkjcecdgbnaabipppbmgfggbe_2025.07.24.00_all_hou4jz7zmeg5zedchpigdjxhve.crx3
Size 16KB
SHA256 56c21927faa028be6ce18c931660eec37e41da4bfbfd47cafa48350f828c0dbd
MD5 479078f9927c39f3ae015938f9a8b304
SHA1 31a6f9dbac78faad676ad3c1d9ee1cb85d87241f
SHA512 b1c098abc3f797dc2b498806a5181d4eea7f8b2e06b20e0ddf94a720fafe2a0677ae38049230d9830f918631ca1b10e4439698b11bb8994ae286b3c14cd3b2c2
SSDEEP 384:cTcwCd5CuqlL+kIVxRtRTGXvcxtsVjrs4rs9IJbjXaKYHuA:YOCuqlL+kIVxRtRTGXvcxt6phbjX/YOA
TLSH
T1A2724FFF46556504D7AA43F894AD3D4CD06B495E8FECE9E7DB22D82E4AB0AF410002DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.6n4Qrh/dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3
Size 136KB
SHA256 0c24e9bd976adffa987e08fc54dc0950c84cf18f9cdb4c5caabc6acf24887c4f
MD5 667e9eec04509aa9e2b318f580addd8c
SHA1 346267ecad10c54de52a3aeb766ea72449500326
SHA512 a9d22d49290c164abf36dd7e887063ccdd2bf508eb2d16bbac6de749e5152805ecb38ca39352706150de29a76839fa6a56c084ea4f2757b61887b3a7912be917
SSDEEP 3072:SGYNExjxgL4glOAq2HgjlKr3dUqK9tXi606uuBTgilY09X:xYNExjxk48W2AMEt507uBUilY05
TLSH
T1F9D3125FDF1FB211ABE4E21CB68532C71284E58AC4BFA943884DF2E09FA89407865648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.com.google.Chrome.7TGjss

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.7TGjss
Size 242KB
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
TLSH
T1F63402BD7D8AE686D006A17676C0B48BE1199F4E41CB7C0F668A89010D70F8C57B9DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.AQg5Mv/ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3
Size 857KB
SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
MD5 a40c655b337e082c76b6ab04042b7ae0
SHA1 3cc2a2b7178a29fd2d246cbc532684d6ae45bea8
SHA512 fb4d54b573eb2275d8a3580fff138ecd7bded27ec58086b909b12c03c8005e35105c354a4a1ff76ada608ee8bbabeaafe208bb9e557661bb74e4ca39ee5eee56
SSDEEP 24576:tN1HYqiefjuhBCLF9t3c7y04bfB8w2aQnVBg1jAQpdnBXAt5:tN1HYqi2z9c7y04rKSpdtzw
TLSH
T1E7152367F7534E87A693C0F101B9EF5CDC2EC6B863DD6D5862DB6405CB8A8014EF1A28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lmelglejhemejginpboagddgdfbepgmp_657_all_ZZ_deryfofz2q4qtmx6akmz3opdna.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.CkwOAA/lmelglejhemejginpboagddgdfbepgmp_657_all_ZZ_deryfofz2q4qtmx6akmz3opdna.crx3
Size 486KB
SHA256 368d56941fb3d5ef234354008c6fa9477fd4745dd207b66d8f42e241edccbf3c
MD5 dbd12905620ab172f58977b7e3b9142a
SHA1 c012843e91fe9119f275f2378b4e93b4855c3c05
SHA512 d9270e376015b1345cb30a02165488bb34f5d629a7d2eb4269676475c55fd1c2f9a6d64ca2822b2a680b7b2c71beae24dc7cb28ab65f34e15806d1ca64f4d1ce
SSDEEP 12288:7MynV+DHnV+DanV+D13T3i3UTuEZUxIZrYjFiiODUnqZM7:pngDng2nggxI5hiQGqZM7
TLSH
T132B423FB8789A1E0CBAD4BF0FC5F3B64B023700C1D92D8C7D49A679E58851A2752D21B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hfnkpimlhhgieaddgfemjhofmfblmnib_10472_all_jjwxvbrnxmxuvavmytrzgvlw5e.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.F26BDw/hfnkpimlhhgieaddgfemjhofmfblmnib_10472_all_jjwxvbrnxmxuvavmytrzgvlw5e.crx3
Size 27KB
SHA256 2b88889c40e7e1ce4d262267cdec3496a544dc7d3d3a8f3344dd7b05d9d89732
MD5 0fdb3e798524ece4451b0ab63713609d
SHA1 eb5ecc0dd0e00943eb1915b4251b5842bae7c3cc
SHA512 41542479021d56e35b5e7961be21d3533bfc9e166bbd51e988c78b1a3f4ab04dd28c7827fe0b5920cb23f2b03b3e526db88b2774929bac6027ac47530f63871e
SSDEEP 768:HfpXL8kYp8yjWnYTyDw6RmP9+dilp4phbjF3g:Hx78kmWSyHmgda+plF3g
TLSH
T1B9C2E116AC547216C0B2223F44B27A115AFBF05E3361D6270D55E718A8C751EEE77C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.L9FIzb/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3
Size 2.4MB
SHA256 9738a550f51cdfb80146b1620b40a37d58c5136254ee1f0f03c20a864fab89d2
MD5 0fa505d26fd906c645e60aa05f12af36
SHA1 ecb1def63dba6d475dcd61c4d3a6938855e6f24a
SHA512 6c49784a21465a2b7348720003f072a279a7aaeb88783b98cdb968a54cb1ce6771122a6f1bbbfb8dd36507576c81d6caa000166f2dc0f81a3feca4e8d5131a00
SSDEEP 49152:7GGdTzNOf9v87G2whzy8x3ZOOK4G7tbbOWVc2JjrqnE1rmoGfi:qGVzGBolTA3ZOOK4Wtb6WpYnE1tGa
TLSH
T1AFC53381A8FC258A4F51BCD0740E58EB8E6CBB541DC7AD3207F926557F5120ACBB9EC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eeigpngbgcognadeebkilcpcaedhellh_2025.06.13.084507_all_acip2yapafsolnpcvaohkisaowaq.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.RMDObP/eeigpngbgcognadeebkilcpcaedhellh_2025.06.13.084507_all_acip2yapafsolnpcvaohkisaowaq.crx3
Size 257KB
SHA256 4497d8060d0e53c12b4403aa9ebe7e827d4880bae3f4139a26a4feb7ed64c4a2
MD5 5a6371818d0598fc615c76004f226666
SHA1 9225ea4a8418a37f8d6d393040ba78f20c93366f
SHA512 69d50587a46ad60c535ba0dfba8f0816f6474205e63a8ae2a8fe0c5f002b3e14dd8739a4dc0d9c60106398fb8566c27bfba9ba5ead347898842606aeba0bbf4a
SSDEEP 6144:FHKYcaVcxaGDSdsAm16knUFEUrlaTiHzeQM+XuWU:BKYUxakSd21TUFEClamHzeQ7up
TLSH
T1FF442A3A59B00465C44D43797A8A3717F3FC8F38AAB16FC514F9195838EB9028B7E61E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

efniojlnjndmcbiieegkicadnoecjjef_1639_all_i5xjqzkeu6bao4gmxoyn3gzq3e.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.UCInJA/efniojlnjndmcbiieegkicadnoecjjef_1639_all_i5xjqzkeu6bao4gmxoyn3gzq3e.crx3
Size 383KB
SHA256 997725e77291803f76d82c727bb903b40dfb705828eb33f492a8d8e4c563d30b
MD5 6d0171fb18f4f2f7f184946524d76341
SHA1 d9447342596ef6df84f0ea5162b1c2a09ac649c4
SHA512 cb3e8fd83f97fed1986841b0df9af44c06af89934a9930ebe4891f791224a737c68f7a06e9a618f948be884b9199b4e0cd556094df8807a1c8b8abd985d548fd
SSDEEP 6144:VHJ2WprYUbVmFVk6wpnnoTBfStk06xrWtefZhzSVs3LowNZFe8YdWeQ:z2WprO4hn6StaBOs3kUedQ
TLSH
T187849EEB2F247903AFC3DD7470C8E52BBDB273D175AA98965049C0B169817D23E8906F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.10.19.1145_all_ac7cecrzrmfngskhgmtk6zmhfjoa.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.WNoiEP/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.10.19.1145_all_ac7cecrzrmfngskhgmtk6zmhfjoa.crx3
Size 10KB
SHA256 e3a7322843834a5270a01c56533a34a24b1a253e3bda6f14046e10d818446165
MD5 cb79d407a4d6d8526b42060b9210b5c2
SHA1 331e3d66e82e130042897faf86dcbd05d7b227f1
SHA512 0ea283f2077ff874e1f2518565497864b11fd8a65f03d65e2b2996048bdba19849fcab81d9a8220cd51d4a09741b9cf222b1393f6ea4fde6db76dfe0590efdf9
SSDEEP 192:Hkgz/5MwS0wqF1GCEomF17IchyrIqVGqKI4eHiTSj:EIS01komF1FmIqQg4eHES
TLSH
T1C4229EE3AD249894CF2B1F3D59E6930709602A9E86E484908077CCCA1570FBDEB94F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

laoigpblnllgcgjnjnllmfolckpjlhki_1.1.0.3_all_adwgvw4jdcarox4vlsm7t4gq257a.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.aVxJa1/laoigpblnllgcgjnjnllmfolckpjlhki_1.1.0.3_all_adwgvw4jdcarox4vlsm7t4gq257a.crx3
Size 12KB
SHA256 7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
MD5 752fb191723f2ac933f27a4cf7b0e381
SHA1 143a9a509ebb85b228eb5e3721c0f4a3274e4f62
SHA512 bc04fcf4486206228df389b27e910bb38e926b0a2b625591f03d3c4f616befd96498b0c8355e83c36400969d2600aafe0f8d06c8ddf2e83636419de21cc68750
SSDEEP 384:KouyxMA8bnsa46GN1eRv/RR7J8jmmOsRJpJyV:dxMzsyGNUZj+jmmrpo
TLSH
T12842AE069D4E3A8FD90AD23D454A3E07377B326711D25449FB8B982980E97B1B0E89CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.66.0_all_cbajhnf6yiba7fvvqskkiojqke.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.cO9rh9/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.66.0_all_cbajhnf6yiba7fvvqskkiojqke.crx3
Size 178KB
SHA256 28220021657e0efee09be4578f0f12ef0860488d7b2b9abb826e576448189bc5
MD5 9a0db71d2e27ecb194348a04e1346e60
SHA1 885f59f1c6b49668912da0d39472f03f87473d95
SHA512 98f7de88481ac97004dc1b30e862cf4c7dbe84d8be12c47959378094b4c073d1a38c53c42f421653b8de5be8ab6fa69abd82d524bb9bca20e195dca97b51b3c1
SSDEEP 3072:rBTQ6Sk1RCW31qAY6vjZmC5dgBS85/cCrhE0YY8CY+wtAkjUUUQNKS2IPvune7:rW6SRWhjpToceYP
TLSH
T1AB0472176215F1F20EB2063E148A6C9592A472E503D7E9F0BA19C24CB7F469FB3943F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jflookgnkcckhobaglndicnbbgbonegd_3091_all_adfb4phbxwqsxsfvrtgwwtg25z6a.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.okUimj/jflookgnkcckhobaglndicnbbgbonegd_3091_all_adfb4phbxwqsxsfvrtgwwtg25z6a.crx3
Size 184KB
SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
MD5 e5e7439bcae6cbb81408e08e1ceaa799
SHA1 a166c00d6f4ef6f541da1a291afcef11a5d7e426
SHA512 6122ff4a5d2a652565c0d9ab600f5c2558c95fac1c7d3eeca7c9bc20d054cdb20f6c089aaf38d51200b0b0276519a52c390142e11989f3d90145d7f648618e71
SSDEEP 3072:YRLHCaFAH1Z2dUZ7ViebPO8B6wAppi+NKfDRdwt20xrFzg7NCmDAsf6B9d/:9lVAdkXPOaRdwtzre7NChsf6B9t
TLSH
T13E044C49F84703A06F0780C99BAD62972104B2F47395CDDFB77FB6A56E00C9B20995BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

khaoiebndkojlmppeemjhbpbandiljpe_145.0.7584.0_mac_adijmuudraws5pmse4bp2wpjlfpq.crx3

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.quxaCv/khaoiebndkojlmppeemjhbpbandiljpe_145.0.7584.0_mac_adijmuudraws5pmse4bp2wpjlfpq.crx3
Size 11KB
SHA256 9f157bd09a986baa46110a0acb7e3d7407208e58d02250c637902962e5ed2c5e
MD5 c2425a80ea4d5f90463e346b50f9d7d3
SHA1 64831f252de87d662b290493e98ec9d917449e91
SHA512 b934b3071adb98db083ff5ef06b239465f075c43a1b33467cc97ea09d7138cbee016fa44d9e8b4ecb89eced44b91a14faf07bf2ef3754b926f014dc03678b510
SSDEEP 192:YM6V27mUXs0aEW8SsWk/pvtHB3Nf5Y10k6QKEa4pmi1XP44PZexJFV3faUUGOuX:kVf0aEW8SsWk/pvtHB3Nf5YKk6QKEa4q
TLSH
T149320E95883A16E9AC3183A5F1B9C2218D21EE2B941F548E1BF353CB7BC1D868F37157
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spindump.txt

Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt
Size 16KB
SHA256 04e8d78fdac940ae023557e0a2a1097bf32c7531c34576c4b23bb2b32146ad21
MD5 443ac9eeb10160391b11b24eaf9c4f6a
SHA1 caff19ad3401f1c62e50d4a978bb9261ab391cc5
SHA512 a00fda1e0aabd7541ed1a98b4344fbbfa8fa2e13872122c338cbb8e534dd0b03cba97524a934b5780c0f8134995481140d8420fcac9ab125d39a33b3772ec8cc
SSDEEP 384:ZaDMNaZdcSioNInzaxkFENFW+wTFC73bK:Zr8ZCS9ypiNI+iFC73bK
TLSH
T1F272CC819D0414BE71B2C0C3B20311003DA124BBF5952DBAB15F56693FA9977FAD2BFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spindump.txt

Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt
Size 276KB
SHA256 129956fd05144a72c3debb4fffdaf521a61183627ce4002e606ed6cb2354a53b
MD5 7f97182d383549160326c6e126a9dbe5
SHA1 d5d9ce1b6eaa2c5beadb2be3d2deecc86722daa2
SHA512 a16d9fe7ff76b12dd8935e18411035529ea2c111ee0c6f3e58d7f8f606551171dba8c2d06ddac8d0ad4e3238717e449aafec7c3170b1071fef0441ab53a96c1f
SSDEEP 6144:6gIz9WdZ01KjMTgaTcbQczEDoQax76Zofj4nyfEJlObNRtyzOidnrslq6SDMcSzW:BdZ01KjMTgaTcbQczEDoQax76Zofjds7
TLSH
T1445474908EEC00A475B690D36713520544AAF41FB4023C7EB2AFC6746F59A7BE3D7A78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads