Analysis

  • user interaction
    yes
  • max time kernel
    599s
  • max time network
    601s
  • platform
    macos-10.15_amd64
  • resource
    macos-20250619-en
  • resource tags

    arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    30/04/2026, 16:28

General

  • Target
    sample.html
  • Size 731KB
  • Sample260430-ty64psfx71
  • SHA256 12dab04f7e8c461d19e25c466dabf409a0922f56105abb1ae95dfe42f76b1dcf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Resource Forking 1 TTPs 4 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/sample.html\""
    1⤵
      PID:485
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/sample.html\""
      1⤵
        PID:485
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/sample.html
        1⤵
          PID:485
          • /bin/zsh
            /bin/zsh -c /Users/run/sample.html
            2⤵
              PID:486
            • /Users/run/sample.html
              /Users/run/sample.html
              2⤵
                PID:486
              • /bin/sh
                sh /Users/run/sample.html
                2⤵
                  PID:486
                • /bin/bash
                  sh /Users/run/sample.html
                  2⤵
                    PID:486
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.Safari.2028
                  1⤵
                    PID:515
                  • /Applications/Safari.app/Contents/MacOS/Safari
                    /Applications/Safari.app/Contents/MacOS/Safari
                    1⤵
                      PID:515
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.Safari.History
                      1⤵
                        PID:516
                      • /System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
                        /System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
                        1⤵
                          PID:516
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.WebKit.WebContent.F60BD91E-92B0-48FF-BE1E-998D06FE7FF4 515
                          1⤵
                            PID:517
                          • /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                            /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                            1⤵
                              PID:517
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.SafariLaunchAgent
                              1⤵
                                PID:522
                              • /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
                                /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
                                1⤵
                                  PID:522
                                • /usr/libexec/xpcproxy
                                  xpcproxy com.apple.WebKit.WebContent.34FFD287-CC8F-46F2-8D41-414C62B2A25F 515
                                  1⤵
                                    PID:523
                                  • /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                    /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                    1⤵
                                      PID:523
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.Safari.SearchHelper 515
                                      1⤵
                                        PID:526
                                      • /System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper
                                        /System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper
                                        1⤵
                                          PID:526
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.Safari.SafeBrowsing.Service
                                          1⤵
                                            PID:527
                                          • /System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service
                                            /System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service
                                            1⤵
                                              PID:527
                                            • /usr/libexec/xpcproxy
                                              xpcproxy com.apple.WebKit.WebContent.FE0FF29B-61AC-4EC1-A228-A3168FD2A29F 515
                                              1⤵
                                                PID:528
                                              • /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                                /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                                1⤵
                                                  PID:528
                                                • /usr/libexec/xpcproxy
                                                  xpcproxy com.apple.WebKit.WebContent.31668AF0-1A09-4726-B431-271E54979C0C 515
                                                  1⤵
                                                    PID:533
                                                  • /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                                    /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                                    1⤵
                                                      PID:533
                                                    • /usr/libexec/xpcproxy
                                                      xpcproxy com.apple.newsyslog
                                                      1⤵
                                                        PID:537
                                                      • /usr/sbin/newsyslog
                                                        /usr/sbin/newsyslog
                                                        1⤵
                                                          PID:537
                                                        • /usr/libexec/xpcproxy
                                                          xpcproxy com.google.Chrome.3056
                                                          1⤵
                                                            PID:538
                                                          • /Applications/Google Chrome.app/Contents/MacOS/Google Chrome
                                                            "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome"
                                                            1⤵
                                                              PID:538
                                                            • /usr/libexec/xpcproxy
                                                              xpcproxy com.apple.GameController.gamecontrollerd
                                                              1⤵
                                                                PID:541
                                                              • /usr/libexec/gamecontrollerd
                                                                /usr/libexec/gamecontrollerd
                                                                1⤵
                                                                  PID:541
                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler
                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler" "--monitor-self-annotation=ptype=crashpad-handler" "--database=/Users/run/Library/Application Support/Google/Chrome/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=channel=" "--annotation=plat=OS X" "--annotation=prod=Chrome_Mac" "--annotation=ver=101.0.4951.54" "--handshake-fd=5"
                                                                  1⤵
                                                                    PID:543
                                                                  • /usr/bin/profiles
                                                                    /usr/bin/profiles status -type enrollment
                                                                    1⤵
                                                                      PID:544
                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall
                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz"
                                                                      1⤵
                                                                        PID:546
                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize
                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize" com.google.Chrome
                                                                        1⤵
                                                                          PID:547
                                                                        • /usr/bin/tar
                                                                          /usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist
                                                                          1⤵
                                                                            PID:548
                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)
                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)" "--type=gpu-process" "--gpu-preferences=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" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=26"
                                                                            1⤵
                                                                              PID:549
                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=network.mojom.NetworkService" "--lang=en-GB" "--service-sandbox-type=network" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=26"
                                                                              1⤵
                                                                                PID:550
                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=storage.mojom.StorageService" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=27"
                                                                                1⤵
                                                                                  PID:551
                                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)
                                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)" "--type=utility" "--utility-sub-type=mac_notifications.mojom.MacNotificationProvider" "--lang=en-GB" "--service-sandbox-type=none" --message-loop-type-ui --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072"
                                                                                  1⤵
                                                                                    PID:552
                                                                                  • /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
                                                                                    /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded
                                                                                    1⤵
                                                                                      PID:553
                                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=7" "--launch-time-ticks=345441392" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=56"
                                                                                      1⤵
                                                                                        PID:554
                                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=6" "--launch-time-ticks=345535827" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=56"
                                                                                        1⤵
                                                                                          PID:555
                                                                                        • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                          "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake-all --system
                                                                                          1⤵
                                                                                            PID:556
                                                                                          • /Users/run/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                            "/Users/run/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake-all
                                                                                            1⤵
                                                                                              PID:557
                                                                                            • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                              "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=4"
                                                                                              1⤵
                                                                                                PID:0
                                                                                                • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                                  "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake --system
                                                                                                  2⤵
                                                                                                    PID:560
                                                                                                  • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                                    "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=4"
                                                                                                    2⤵
                                                                                                      PID:0
                                                                                                      • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/Helpers/launcher
                                                                                                        "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/Helpers/launcher" --internal
                                                                                                        3⤵
                                                                                                          PID:563
                                                                                                        • /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin
                                                                                                          /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin --productid com.google.Chrome --print-tickets --store /Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
                                                                                                          3⤵
                                                                                                            PID:564
                                                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=8" "--launch-time-ticks=348955040" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=71"
                                                                                                            3⤵
                                                                                                              PID:565
                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=12" "--launch-time-ticks=349104470" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=71"
                                                                                                              3⤵
                                                                                                                PID:567
                                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=10" "--launch-time-ticks=349126358" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=75"
                                                                                                                3⤵
                                                                                                                  PID:568
                                                                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=11" "--launch-time-ticks=349160933" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=75"
                                                                                                                  3⤵
                                                                                                                    PID:569
                                                                                                                  • /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher
                                                                                                                    "/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher"
                                                                                                                    3⤵
                                                                                                                      PID:570
                                                                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=90"
                                                                                                                      3⤵
                                                                                                                        PID:571
                                                                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=14" "--launch-time-ticks=354182794" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=95"
                                                                                                                        3⤵
                                                                                                                          PID:572
                                                                                                                        • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                                                          GoogleUpdater --server "--service=update-internal" --system
                                                                                                                          3⤵
                                                                                                                            PID:0
                                                                                                                            • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                                                              "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
                                                                                                                              4⤵
                                                                                                                                PID:1.8446744073709552e+19
                                                                                                                              • /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher
                                                                                                                                "/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher"
                                                                                                                                4⤵
                                                                                                                                  PID:576
                                                                                                                                • /usr/libexec/xpcproxy
                                                                                                                                  xpcproxy com.apple.spindump
                                                                                                                                  4⤵
                                                                                                                                    PID:577
                                                                                                                                  • /usr/sbin/spindump
                                                                                                                                    /usr/sbin/spindump
                                                                                                                                    4⤵
                                                                                                                                      PID:577
                                                                                                                                    • /usr/libexec/xpcproxy
                                                                                                                                      xpcproxy com.apple.spindump_agent
                                                                                                                                      4⤵
                                                                                                                                        PID:578
                                                                                                                                      • /usr/libexec/spindump_agent
                                                                                                                                        /usr/libexec/spindump_agent
                                                                                                                                        4⤵
                                                                                                                                          PID:578
                                                                                                                                        • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                                                                          GoogleUpdater --server "--service=update" --system
                                                                                                                                          4⤵
                                                                                                                                            PID:0
                                                                                                                                            • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                                                                              "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
                                                                                                                                              5⤵
                                                                                                                                                PID:1.8446744073709552e+19
                                                                                                                                              • /usr/bin/profiles
                                                                                                                                                /usr/bin/profiles status -type enrollment
                                                                                                                                                5⤵
                                                                                                                                                  PID:583
                                                                                                                                                • /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin
                                                                                                                                                  /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin -P com.google.Chrome --delete --store /Users/run/Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
                                                                                                                                                  5⤵
                                                                                                                                                    PID:584
                                                                                                                                                  • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                                                                                    GoogleUpdater --server "--service=update" --system
                                                                                                                                                    5⤵
                                                                                                                                                      PID:0
                                                                                                                                                      • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                                                                                        "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
                                                                                                                                                        6⤵
                                                                                                                                                          PID:1.8446744073709552e+19
                                                                                                                                                        • /usr/sbin/system_profiler
                                                                                                                                                          /usr/sbin/system_profiler SPConfigurationProfileDataType -detailLevel mini -timeout 15 -xml
                                                                                                                                                          6⤵
                                                                                                                                                            PID:585
                                                                                                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=106"
                                                                                                                                                            6⤵
                                                                                                                                                              PID:590
                                                                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=106"
                                                                                                                                                              6⤵
                                                                                                                                                                PID:591
                                                                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                                                                xpcproxy com.apple.ReportMemoryException
                                                                                                                                                                6⤵
                                                                                                                                                                  PID:592
                                                                                                                                                                • /usr/libexec/ReportMemoryException
                                                                                                                                                                  /usr/libexec/ReportMemoryException
                                                                                                                                                                  6⤵
                                                                                                                                                                    PID:592
                                                                                                                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=110"
                                                                                                                                                                    6⤵
                                                                                                                                                                      PID:595
                                                                                                                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=117"
                                                                                                                                                                      6⤵
                                                                                                                                                                        PID:596
                                                                                                                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=66"
                                                                                                                                                                        6⤵
                                                                                                                                                                          PID:597
                                                                                                                                                                        • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                                                                          "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=20" "--launch-time-ticks=381667425" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=66"
                                                                                                                                                                          6⤵
                                                                                                                                                                            PID:598
                                                                                                                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=73"
                                                                                                                                                                            6⤵
                                                                                                                                                                              PID:599
                                                                                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=73"
                                                                                                                                                                              6⤵
                                                                                                                                                                                PID:600
                                                                                                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=24" "--launch-time-ticks=385718306" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=121"
                                                                                                                                                                                6⤵
                                                                                                                                                                                  PID:601
                                                                                                                                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=126"
                                                                                                                                                                                  6⤵
                                                                                                                                                                                    PID:603
                                                                                                                                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=26" "--launch-time-ticks=394602598" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=126"
                                                                                                                                                                                    6⤵
                                                                                                                                                                                      PID:604
                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                      sh -c /usr/sbin/kextstat
                                                                                                                                                                                      6⤵
                                                                                                                                                                                        PID:605
                                                                                                                                                                                      • /bin/bash
                                                                                                                                                                                        sh -c /usr/sbin/kextstat
                                                                                                                                                                                        6⤵
                                                                                                                                                                                          PID:605
                                                                                                                                                                                        • /usr/sbin/kextstat
                                                                                                                                                                                          /usr/sbin/kextstat
                                                                                                                                                                                          6⤵
                                                                                                                                                                                            PID:605
                                                                                                                                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=121"
                                                                                                                                                                                            6⤵
                                                                                                                                                                                              PID:606
                                                                                                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=121"
                                                                                                                                                                                              6⤵
                                                                                                                                                                                                PID:607
                                                                                                                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=121"
                                                                                                                                                                                                6⤵
                                                                                                                                                                                                  PID:608
                                                                                                                                                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=121"
                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                    PID:609
                                                                                                                                                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=121"
                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                      PID:610
                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                      sh -c /usr/sbin/kextstat
                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                        PID:611
                                                                                                                                                                                                      • /bin/bash
                                                                                                                                                                                                        sh -c /usr/sbin/kextstat
                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                          PID:611
                                                                                                                                                                                                        • /usr/sbin/kextstat
                                                                                                                                                                                                          /usr/sbin/kextstat
                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                            PID:611
                                                                                                                                                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=113"
                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                              PID:612
                                                                                                                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=113"
                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                PID:613
                                                                                                                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                                                                                                                xpcproxy com.apple.mobile.keybagd
                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                  PID:618
                                                                                                                                                                                                                • /usr/libexec/keybagd
                                                                                                                                                                                                                  /usr/libexec/keybagd -t 15
                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                    PID:618
                                                                                                                                                                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=123"
                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                      PID:620
                                                                                                                                                                                                                    • /usr/bin/profiles
                                                                                                                                                                                                                      /usr/bin/profiles status -type enrollment
                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                        PID:621
                                                                                                                                                                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=114"
                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                          PID:625
                                                                                                                                                                                                                        • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                          "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=114"
                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                            PID:632
                                                                                                                                                                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=123"
                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                              PID:636
                                                                                                                                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=124"
                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                PID:637
                                                                                                                                                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=123"
                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                  PID:638
                                                                                                                                                                                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=124"
                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                    PID:639
                                                                                                                                                                                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=123"
                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                      PID:640
                                                                                                                                                                                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                                                                                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=42" "--launch-time-ticks=600867234" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=72"
                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                        PID:641
                                                                                                                                                                                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                                                                                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=43" "--launch-time-ticks=601974289" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=72"
                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                          PID:642
                                                                                                                                                                                                                                        • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                                          "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=123"
                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                            PID:643
                                                                                                                                                                                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=72"
                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                              PID:644
                                                                                                                                                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=72"
                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                PID:645
                                                                                                                                                                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                                                                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=47" "--launch-time-ticks=613145893" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=124"
                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                  PID:646
                                                                                                                                                                                                                                                • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                  xpcproxy com.apple.sysmond
                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                    PID:647
                                                                                                                                                                                                                                                  • /usr/libexec/sysmond
                                                                                                                                                                                                                                                    /usr/libexec/sysmond
                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                      PID:647
                                                                                                                                                                                                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                                                                                                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=48" "--launch-time-ticks=618921840" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=123"
                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                        PID:648
                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                        sh -c /usr/sbin/kextstat
                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                          PID:649
                                                                                                                                                                                                                                                        • /bin/bash
                                                                                                                                                                                                                                                          sh -c /usr/sbin/kextstat
                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                            PID:649
                                                                                                                                                                                                                                                          • /usr/sbin/kextstat
                                                                                                                                                                                                                                                            /usr/sbin/kextstat
                                                                                                                                                                                                                                                            6⤵
                                                                                                                                                                                                                                                              PID:649
                                                                                                                                                                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                                                                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=49" "--launch-time-ticks=652062167" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=72"
                                                                                                                                                                                                                                                              6⤵
                                                                                                                                                                                                                                                                PID:650
                                                                                                                                                                                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                                                                                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=50" "--launch-time-ticks=698203020" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=123"
                                                                                                                                                                                                                                                                6⤵
                                                                                                                                                                                                                                                                  PID:651
                                                                                                                                                                                                                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                                                                                                                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=51" "--launch-time-ticks=702004066" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=123"
                                                                                                                                                                                                                                                                  6⤵
                                                                                                                                                                                                                                                                    PID:652
                                                                                                                                                                                                                                                                  • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                    xpcproxy com.apple.speech.speechsynthesisd
                                                                                                                                                                                                                                                                    6⤵
                                                                                                                                                                                                                                                                      PID:653
                                                                                                                                                                                                                                                                    • /System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd
                                                                                                                                                                                                                                                                      /System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd
                                                                                                                                                                                                                                                                      6⤵
                                                                                                                                                                                                                                                                        PID:653
                                                                                                                                                                                                                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                                                                                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=audio.mojom.AudioService" "--lang=en-GB" "--service-sandbox-type=audio" --message-loop-type-ui --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=132"
                                                                                                                                                                                                                                                                        6⤵
                                                                                                                                                                                                                                                                          PID:654
                                                                                                                                                                                                                                                                        • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                                                                                                                                                                                          "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=53" "--launch-time-ticks=833563062" --shared-files "--field-trial-handle=1718379636,r,11435279168471453634,8461384366980998805,131072" "--seatbelt-client=132"
                                                                                                                                                                                                                                                                          6⤵
                                                                                                                                                                                                                                                                            PID:657

                                                                                                                                                                                                                                                                Network

                                                                                                                                                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                      Replay Monitor

                                                                                                                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                                                                                                                      Downloads

                                                                                                                                                                                                                                                                      visual_model.tflite

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/ClientSidePhishing/29.0/visual_model.tflite
                                                                                                                                                                                                                                                                      • Size 3.0MB
                                                                                                                                                                                                                                                                      • SHA256 d38a4cda8912f9598b8701dac7d5ee90eff324ed1fb9d277b9784fe45a4e6c72
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      settings.dat

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Crashpad/settings.dat
                                                                                                                                                                                                                                                                      • Size 40B
                                                                                                                                                                                                                                                                      • SHA256 5cca682cfa80faa97838327d83ef5a2cc39e21b0cf16639aa7c4f095bf1be4e6
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                      24daad59-077d-4017-ba0f-15acde680b23

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Download Service/Files/24daad59-077d-4017-ba0f-15acde680b23
                                                                                                                                                                                                                                                                      • Size 258KB
                                                                                                                                                                                                                                                                      • SHA256 8d21fe1bd251856bfaeaedd6a72ab78f153a047b6042e0fc614f57a32b56d340
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      Unconfirmed 53981.crdownload

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Download Service/Files/Unconfirmed 53981.crdownload
                                                                                                                                                                                                                                                                      • Size 20KB
                                                                                                                                                                                                                                                                      • SHA256 ee33435f6bafd442fde29a3949a5607d15d1ef99058ea80077b7fa3d497b0721
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      CURRENT

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/CURRENT
                                                                                                                                                                                                                                                                      • Size 16B
                                                                                                                                                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                      MANIFEST-000001

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/MANIFEST-000001
                                                                                                                                                                                                                                                                      • Size 41B
                                                                                                                                                                                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                      craw_background.js

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.6_1/craw_background.js
                                                                                                                                                                                                                                                                      • Size 531KB
                                                                                                                                                                                                                                                                      • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      000003.ldb

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Local Storage/leveldb/000003.ldb
                                                                                                                                                                                                                                                                      • Size 339B
                                                                                                                                                                                                                                                                      • SHA256 9cc80c0d1dfe7205c6530402c3240171966e72b6df8ef0e8571660fb18652cd5
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                      000003.ldb

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Session Storage/000003.ldb
                                                                                                                                                                                                                                                                      • Size 569B
                                                                                                                                                                                                                                                                      • SHA256 b7600cfe0aa091e9ab8540869b7ea120a62b36240acc0370c3fd62655b58bf4e
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                      000003.ldb

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/000003.ldb
                                                                                                                                                                                                                                                                      • Size 269B
                                                                                                                                                                                                                                                                      • SHA256 241a349a63252a8026016a5ef0d713fc18f76735dd0c10963f9a693bfdb9b172
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                      000003.ldb

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Storage/ext/gfdkimpbcpahaombhbimeihdjnejgicl/def/Session Storage/000003.ldb
                                                                                                                                                                                                                                                                      • Size 141B
                                                                                                                                                                                                                                                                      • SHA256 085c44dfa11e65ac3548c4d0fe1ae641570f90c7caaa2881c3990efcf555e6a8
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                      000003.ldb

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/000003.ldb
                                                                                                                                                                                                                                                                      • Size 136B
                                                                                                                                                                                                                                                                      • SHA256 935d36c021d0e08a5648c622f3f6fde376e3310013680ae598c0e22dc943d132
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                      000003.ldb

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/000003.ldb
                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                      • SHA256 18b5270537241fdd8a8de2f4435bb9a19acc82d565bf629678c07360e0fa89d8
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                      000003.ldb

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000003.ldb
                                                                                                                                                                                                                                                                      • Size 288B
                                                                                                                                                                                                                                                                      • SHA256 79b1150f1008ed3fbde59417e9727bce33a34ee2ac5b407eec1a82beabdd2c06
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                      model.tflite

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/OptimizationGuidePredictionModels/b79e4239-237d-43a4-8212-ade2616e2755/model.tflite
                                                                                                                                                                                                                                                                      • Size 382KB
                                                                                                                                                                                                                                                                      • SHA256 a0956386dc64fd9f4883c8741f950cd60a56859616b159c9e4251c9eb0ac5534
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      Ruleset Data

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.32.0/Ruleset Data
                                                                                                                                                                                                                                                                      • Size 138KB
                                                                                                                                                                                                                                                                      • SHA256 fed1557c8b4e40813114db3b546c043105892dd0895c4d7c02d45a8be351173a
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      Ruleset Data

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.67.0/Ruleset Data
                                                                                                                                                                                                                                                                      • Size 240KB
                                                                                                                                                                                                                                                                      • SHA256 39efbaca82dc687f6da7efe34fe43cda682a13bcc7aeb3f3268417556e757966
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      Filtering Rules

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Unindexed Rules/9.67.0/Filtering Rules
                                                                                                                                                                                                                                                                      • Size 151KB
                                                                                                                                                                                                                                                                      • SHA256 68ab9eea0f6f2c52f3a1e5ce0f1ffaa5c67c44b0e18e5ea85f3a6131fc880247
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      login.keychain-db

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                                                                                                                                      • Size 114KB
                                                                                                                                                                                                                                                                      • SHA256 8cb660a6e925c4dae6ef90e4bedfdf64c44619088246282f5bf2c954d6a58567
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      login.keychain-db

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                                                                                                                                      • Size 114KB
                                                                                                                                                                                                                                                                      • SHA256 cad0b8f2a40dcb9a8338ff0141a8d3cc02da922c2a4a36ba39fe93bc06480313
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      login.keychain-db

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                                                                                                                                      • Size 112KB
                                                                                                                                                                                                                                                                      • SHA256 eef32cce906c5c26d9c5bc5bead8c60993c1faa6c7ef357f3af430738b42ac09
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      login.keychain-db

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                                                                                                                                      • Size 114KB
                                                                                                                                                                                                                                                                      • SHA256 2954324c9cd4b516bf2e75db66e71dede034815845e101b8915ed3d471aed39b
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      login.keychain-db

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                                                                                                                                      • Size 114KB
                                                                                                                                                                                                                                                                      • SHA256 c9996c15794733995edcec6a3678efcec81d731e1ac342bb5c9fa30e1df09de2
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      login.keychain-db

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                                                                                                                                      • Size 112KB
                                                                                                                                                                                                                                                                      • SHA256 9646048ac45bf26f4fd5df8c162f3742243dd45b62ff6707fbec3b928d51119f
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      2529545429CE075A4E64DE7DAA3D4C27

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Safari/Favicon Cache/favicons/2529545429CE075A4E64DE7DAA3D4C27
                                                                                                                                                                                                                                                                      • Size 5KB
                                                                                                                                                                                                                                                                      • SHA256 6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      DAD01C5AB7E558677870EA8EC6F826A4

                                                                                                                                                                                                                                                                      • Path /Users/run/Library/Safari/Favicon Cache/favicons/DAD01C5AB7E558677870EA8EC6F826A4
                                                                                                                                                                                                                                                                      • Size 5KB
                                                                                                                                                                                                                                                                      • SHA256 897a8637e0d60215f97956b0a3da3e7e57f0e02a1aaa9d195c0a8f74576c68a1
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      tailspin-trace.2026-04-30_16-30-30.tailspin

                                                                                                                                                                                                                                                                      • Path /private/var/db/spindump/tailspin-trace.2026-04-30_16-30-30.tailspin
                                                                                                                                                                                                                                                                      • Size 16.4MB
                                                                                                                                                                                                                                                                      • SHA256 6c87d2edb5d90efa65bb0e3c23010736a59adffc41d9f1bcc66a76f87eb1fb95
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      tailspin-trace.2026-04-30_16-30-41.tailspin

                                                                                                                                                                                                                                                                      • Path /private/var/db/spindump/tailspin-trace.2026-04-30_16-30-41.tailspin
                                                                                                                                                                                                                                                                      • Size 9.5MB
                                                                                                                                                                                                                                                                      • SHA256 9241db57a7c3301b67af5d206810e5e8a4ce3044651136b557b145bc2913bf2d
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      tailspin-trace.2026-04-30_16-34-33.tailspin

                                                                                                                                                                                                                                                                      • Path /private/var/db/spindump/tailspin-trace.2026-04-30_16-34-33.tailspin
                                                                                                                                                                                                                                                                      • Size 15.8MB
                                                                                                                                                                                                                                                                      • SHA256 fd7e954ee6dd9caebb44f11f3e5d396425b7f35828c61bc54409d74b272c8136
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      icon_128.png

                                                                                                                                                                                                                                                                      • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dirR8Qntg/CRX_INSTALL/images/icon_128.png
                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                      • SHA256 4f17efbd974a41d88cb36567aab6bf4586579e78780f00b1826676819e14bff4
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                      icon_16.png

                                                                                                                                                                                                                                                                      • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dirR8Qntg/CRX_INSTALL/images/icon_16.png
                                                                                                                                                                                                                                                                      • Size 531B
                                                                                                                                                                                                                                                                      • SHA256 0a4bd08db6422f8e7a8a218ef39c1b99a5a675f12697f26be88f9afc2e1f9378
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                      UUIDToBinaryLocations

                                                                                                                                                                                                                                                                      • Path /var/db/spindump/UUIDToBinaryLocations
                                                                                                                                                                                                                                                                      • Size 85KB
                                                                                                                                                                                                                                                                      • SHA256 ba823651bb51ade481cec55a9152efe5131c34f97ad0c93cfb1dc3c5ba0f05fd
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      malware,osx,url_expression

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expression
                                                                                                                                                                                                                                                                      • Size 41KB
                                                                                                                                                                                                                                                                      • SHA256 dd2eb9f85108c7659d59ba6b6debf92025b38d6322dab367449f1fd4e1269f7b
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      social_engineering,osx,url_expression

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expression
                                                                                                                                                                                                                                                                      • Size 19.3MB
                                                                                                                                                                                                                                                                      • SHA256 e0da50e921c23795d2c63112b5b97ee60fd981ca7caf499df56ee954be5d2dba
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      unwanted_software,osx,url_expression

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expression
                                                                                                                                                                                                                                                                      • Size 121KB
                                                                                                                                                                                                                                                                      • SHA256 36069e8aa01e52edcdd3f73fbc7cf55350ce812cdb68d7669ddd8dcbe1ed8466
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      mdsDirectory.db

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari//mds/mdsDirectory.db
                                                                                                                                                                                                                                                                      • Size 47KB
                                                                                                                                                                                                                                                                      • SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      mdsObject.db

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari//mds/mdsObject.db
                                                                                                                                                                                                                                                                      • Size 4KB
                                                                                                                                                                                                                                                                      • SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.10.19.1145_all_ac7cecrzrmfngskhgmtk6zmhfjoa.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.3wMeh7/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.10.19.1145_all_ac7cecrzrmfngskhgmtk6zmhfjoa.crx3
                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                      • SHA256 e3a7322843834a5270a01c56533a34a24b1a253e3bda6f14046e10d818446165
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.88oQRY/dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3
                                                                                                                                                                                                                                                                      • Size 136KB
                                                                                                                                                                                                                                                                      • SHA256 0c24e9bd976adffa987e08fc54dc0950c84cf18f9cdb4c5caabc6acf24887c4f
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      gonpemdgkjcecdgbnaabipppbmgfggbe_2025.07.24.00_all_hou4jz7zmeg5zedchpigdjxhve.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.AkzbEf/gonpemdgkjcecdgbnaabipppbmgfggbe_2025.07.24.00_all_hou4jz7zmeg5zedchpigdjxhve.crx3
                                                                                                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                                                                                                      • SHA256 56c21927faa028be6ce18c931660eec37e41da4bfbfd47cafa48350f828c0dbd
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.67.0_all_adq67u3zvvdnnw77fq7y4267pwxa.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.AmTlrU/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.67.0_all_adq67u3zvvdnnw77fq7y4267pwxa.crx3
                                                                                                                                                                                                                                                                      • Size 178KB
                                                                                                                                                                                                                                                                      • SHA256 589ecb7b1f8267172ff5479357e05e42ba40ea7d27599029c9ee4e780521c2f3
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      hfnkpimlhhgieaddgfemjhofmfblmnib_10495_all_nqf2lmvzka7vemt2kpgsis2xpq.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.Axg249/hfnkpimlhhgieaddgfemjhofmfblmnib_10495_all_nqf2lmvzka7vemt2kpgsis2xpq.crx3
                                                                                                                                                                                                                                                                      • Size 27KB
                                                                                                                                                                                                                                                                      • SHA256 e8e74960bdf050fcd12ddb275f700220320cb49e78657932e47de692a76dbe71
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      obedbbhbpmojnkanicioggnmelmoomoc_20251024.824731831.14_all_ENGB500000_lof45en2yrc2tvvdfc42hhgnkq.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.G8Bsau/obedbbhbpmojnkanicioggnmelmoomoc_20251024.824731831.14_all_ENGB500000_lof45en2yrc2tvvdfc42hhgnkq.crx3
                                                                                                                                                                                                                                                                      • Size 7.6MB
                                                                                                                                                                                                                                                                      • SHA256 95ff39d8ef1186d8b10dd3a57c6a4a426732b5fca36bdea4670fc4eb0f0b04b5
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      .com.google.Chrome.JuP7pE

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.JuP7pE
                                                                                                                                                                                                                                                                      • Size 242KB
                                                                                                                                                                                                                                                                      • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.YPfwDI/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3
                                                                                                                                                                                                                                                                      • Size 2.4MB
                                                                                                                                                                                                                                                                      • SHA256 9738a550f51cdfb80146b1620b40a37d58c5136254ee1f0f03c20a864fab89d2
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      jflookgnkcckhobaglndicnbbgbonegd_3091_all_adfb4phbxwqsxsfvrtgwwtg25z6a.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.YsCjTS/jflookgnkcckhobaglndicnbbgbonegd_3091_all_adfb4phbxwqsxsfvrtgwwtg25z6a.crx3
                                                                                                                                                                                                                                                                      • Size 184KB
                                                                                                                                                                                                                                                                      • SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      laoigpblnllgcgjnjnllmfolckpjlhki_1.1.0.3_all_adwgvw4jdcarox4vlsm7t4gq257a.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.bVAHvB/laoigpblnllgcgjnjnllmfolckpjlhki_1.1.0.3_all_adwgvw4jdcarox4vlsm7t4gq257a.crx3
                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                      • SHA256 7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.cqusAR/ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3
                                                                                                                                                                                                                                                                      • Size 857KB
                                                                                                                                                                                                                                                                      • SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      lmelglejhemejginpboagddgdfbepgmp_662_all_ZZ_ac6u6ze7sm7u2dv6kzbnczrhotmq.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.fCtCFv/lmelglejhemejginpboagddgdfbepgmp_662_all_ZZ_ac6u6ze7sm7u2dv6kzbnczrhotmq.crx3
                                                                                                                                                                                                                                                                      • Size 488KB
                                                                                                                                                                                                                                                                      • SHA256 cbb8e6f6fd606500b084ac3078ef0cf0b46e43a8a475846ed5b846b755e24c32
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      efniojlnjndmcbiieegkicadnoecjjef_1654_all_acm6vcs32ai6a7eqpkpag4vn2heq.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.ubYQbj/efniojlnjndmcbiieegkicadnoecjjef_1654_all_acm6vcs32ai6a7eqpkpag4vn2heq.crx3
                                                                                                                                                                                                                                                                      • Size 371KB
                                                                                                                                                                                                                                                                      • SHA256 e66188879b36fd255856a911cef9343d8bc37a7ffb452487044b0983d6cc38e0
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      eeigpngbgcognadeebkilcpcaedhellh_2025.06.13.084507_all_acip2yapafsolnpcvaohkisaowaq.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.ueeT4x/eeigpngbgcognadeebkilcpcaedhellh_2025.06.13.084507_all_acip2yapafsolnpcvaohkisaowaq.crx3
                                                                                                                                                                                                                                                                      • Size 257KB
                                                                                                                                                                                                                                                                      • SHA256 4497d8060d0e53c12b4403aa9ebe7e827d4880bae3f4139a26a4feb7ed64c4a2
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      khaoiebndkojlmppeemjhbpbandiljpe_145.0.7584.0_mac_adijmuudraws5pmse4bp2wpjlfpq.crx3

                                                                                                                                                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.z9tBrj/khaoiebndkojlmppeemjhbpbandiljpe_145.0.7584.0_mac_adijmuudraws5pmse4bp2wpjlfpq.crx3
                                                                                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                                                                                      • SHA256 9f157bd09a986baa46110a0acb7e3d7407208e58d02250c637902962e5ed2c5e
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      spindump.2.txt

                                                                                                                                                                                                                                                                      • Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.2.txt
                                                                                                                                                                                                                                                                      • Size 31KB
                                                                                                                                                                                                                                                                      • SHA256 2f60f2fd4ca3708fcea45c8a88d7507403c20c2e361cf66548eccb4a8da52636
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      spindump.2.txt

                                                                                                                                                                                                                                                                      • Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.2.txt
                                                                                                                                                                                                                                                                      • Size 1.6MB
                                                                                                                                                                                                                                                                      • SHA256 1a9c0f74e05d70ab7a092a268a7abf303b75e11cd1453618e0f71a5ff50639cc
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      spindump.txt

                                                                                                                                                                                                                                                                      • Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt
                                                                                                                                                                                                                                                                      • Size 19KB
                                                                                                                                                                                                                                                                      • SHA256 e92e69a6149b7bb3ede410902e5d6803cecd0e09d693694b8f8e555402eb6962
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      spindump.txt

                                                                                                                                                                                                                                                                      • Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt
                                                                                                                                                                                                                                                                      • Size 2.5MB
                                                                                                                                                                                                                                                                      • SHA256 fc224db5f23f7fcfd2cd81f5480370a6e32862e99ab40eb15d960077f27373aa
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      spindump.txt

                                                                                                                                                                                                                                                                      • Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt
                                                                                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                                                                                      • SHA256 25721f3ebe99cce13ddc11f30f2b451a0273480cedbffe3773b914319621f4aa
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                      spindump.txt

                                                                                                                                                                                                                                                                      • Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt
                                                                                                                                                                                                                                                                      • Size 1.4MB
                                                                                                                                                                                                                                                                      • SHA256 f56de21e1e82a491937ee8de53cee81e2b198889ff5fe9efc597267da2f8313b
                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH