Analysis

  • geolocation tags

    nanew-jerseynorth-americaunited-statesususa
  • max time kernel
    147s
  • max time network
    149s
  • platform
    macos-10.15_amd64
  • resource
    macos-20250619-en
  • resource tags

    arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    02/07/2026, 04:14

General

  • Target
    https://pixelbattle.fun/
  • Sample260702-et1nssh17m
Score
4/10

Malware Config

Signatures

  • Resource Forking 1 TTPs 6 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

Processes

  • /bin/sh
    sh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window 'https://pixelbattle.fun/'"
    1⤵
      PID:453
    • /bin/bash
      sh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window 'https://pixelbattle.fun/'"
      1⤵
        PID:453
      • /Applications/Google Chrome.app/Contents/MacOS/Google Chrome
        "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" "--simulate-outdated-no-au=Tue, 31 Dec 2099" --new-window https://pixelbattle.fun/
        1⤵
          PID:453
        • /usr/libexec/xpcproxy
          xpcproxy com.apple.GameController.gamecontrollerd
          1⤵
            PID:473
          • /usr/libexec/gamecontrollerd
            /usr/libexec/gamecontrollerd
            1⤵
              PID:473
            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler
              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler" "--monitor-self-annotation=ptype=crashpad-handler" "--database=/Users/run/Library/Application Support/Google/Chrome/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=channel=" "--annotation=plat=OS X" "--annotation=prod=Chrome_Mac" "--annotation=ver=101.0.4951.54" "--handshake-fd=9"
              1⤵
                PID:475
              • /usr/bin/profiles
                /usr/bin/profiles status -type enrollment
                1⤵
                  PID:477
                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall
                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz"
                  1⤵
                    PID:486
                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize
                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize" com.google.Chrome
                    1⤵
                      PID:487
                    • /usr/bin/tar
                      /usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist
                      1⤵
                        PID:488
                      • /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
                        /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded
                        1⤵
                          PID:489
                        • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                          "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake-all --system
                          1⤵
                            PID:490
                          • /Users/run/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                            "/Users/run/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake-all
                            1⤵
                              PID:491
                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)
                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)" "--type=gpu-process" "--gpu-preferences=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" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=29"
                              1⤵
                                PID:492
                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=network.mojom.NetworkService" "--lang=en-GB" "--service-sandbox-type=network" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=31"
                                1⤵
                                  PID:493
                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=storage.mojom.StorageService" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=31"
                                  1⤵
                                    PID:494
                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)
                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)" "--type=utility" "--utility-sub-type=mac_notifications.mojom.MacNotificationProvider" "--lang=en-GB" "--service-sandbox-type=none" --message-loop-type-ui --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072"
                                    1⤵
                                      PID:495
                                    • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                      "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=4"
                                      1⤵
                                        PID:0
                                        • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                          "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake --system
                                          2⤵
                                            PID:498
                                          • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                            "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=4"
                                            2⤵
                                              PID:0
                                              • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/Helpers/launcher
                                                "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/Helpers/launcher" --internal
                                                3⤵
                                                  PID:501
                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=7" "--launch-time-ticks=292388489" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=62"
                                                  3⤵
                                                    PID:502
                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=6" "--launch-time-ticks=292447180" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=62"
                                                    3⤵
                                                      PID:503
                                                    • /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin
                                                      /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin --productid com.google.Chrome --print-tickets --store /Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
                                                      3⤵
                                                        PID:504
                                                      • /usr/libexec/xpcproxy
                                                        xpcproxy com.apple.SafariLaunchAgent
                                                        3⤵
                                                          PID:505
                                                        • /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
                                                          /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
                                                          3⤵
                                                            PID:505
                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=8" "--launch-time-ticks=296157541" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=76"
                                                            3⤵
                                                              PID:506
                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=12" "--launch-time-ticks=296217578" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=67"
                                                              3⤵
                                                                PID:507
                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=10" "--launch-time-ticks=296686646" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=80"
                                                                3⤵
                                                                  PID:508
                                                                • /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher
                                                                  "/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher"
                                                                  3⤵
                                                                    PID:509
                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=11" "--launch-time-ticks=296968359" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=80"
                                                                    3⤵
                                                                      PID:510
                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=89"
                                                                      3⤵
                                                                        PID:511
                                                                      • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                        GoogleUpdater --server "--service=update-internal" --system
                                                                        3⤵
                                                                          PID:0
                                                                          • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                            "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
                                                                            4⤵
                                                                              PID:1.8446744073709552e+19
                                                                            • /usr/sbin/system_profiler
                                                                              /usr/sbin/system_profiler SPConfigurationProfileDataType -detailLevel mini -timeout 15 -xml
                                                                              4⤵
                                                                                PID:515
                                                                              • /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher
                                                                                "/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher"
                                                                                4⤵
                                                                                  PID:519
                                                                                • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                  GoogleUpdater --server "--service=update" --system
                                                                                  4⤵
                                                                                    PID:1.8446744073709552e+19
                                                                                  • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                    "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
                                                                                    4⤵
                                                                                      PID:1.8446744073709552e+19
                                                                                    • /usr/bin/profiles
                                                                                      /usr/bin/profiles status -type enrollment
                                                                                      4⤵
                                                                                        PID:524
                                                                                      • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                        GoogleUpdater --server "--service=update" --system
                                                                                        4⤵
                                                                                          PID:1.8446744071563117e+19
                                                                                        • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                          "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
                                                                                          4⤵
                                                                                            PID:1.8446744073709552e+19
                                                                                          • /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin
                                                                                            /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin -P com.google.Chrome --delete --store /Users/run/Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
                                                                                            4⤵
                                                                                              PID:528
                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                              4⤵
                                                                                                PID:529
                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=107"
                                                                                                4⤵
                                                                                                  PID:530
                                                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=105"
                                                                                                  4⤵
                                                                                                    PID:531
                                                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=119"
                                                                                                    4⤵
                                                                                                      PID:532
                                                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=118"
                                                                                                      4⤵
                                                                                                        PID:533
                                                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=20" "--launch-time-ticks=313239452" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=124"
                                                                                                        4⤵
                                                                                                          PID:534
                                                                                                        • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                          "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=69"
                                                                                                          4⤵
                                                                                                            PID:535
                                                                                                          • /usr/libexec/xpcproxy
                                                                                                            xpcproxy com.apple.nsurlstoraged
                                                                                                            4⤵
                                                                                                              PID:536
                                                                                                            • /usr/libexec/nsurlstoraged
                                                                                                              /usr/libexec/nsurlstoraged --privileged
                                                                                                              4⤵
                                                                                                                PID:536
                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                xpcproxy com.apple.StreamingUnzipService 172
                                                                                                                4⤵
                                                                                                                  PID:548
                                                                                                                • /System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
                                                                                                                  /System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
                                                                                                                  4⤵
                                                                                                                    PID:548
                                                                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=122"
                                                                                                                    4⤵
                                                                                                                      PID:556
                                                                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=122"
                                                                                                                      4⤵
                                                                                                                        PID:557
                                                                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                                                        4⤵
                                                                                                                          PID:559
                                                                                                                        • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                          "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                                                          4⤵
                                                                                                                            PID:560
                                                                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                                                            4⤵
                                                                                                                              PID:562
                                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                                                              4⤵
                                                                                                                                PID:563
                                                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                                                                4⤵
                                                                                                                                  PID:564
                                                                                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                                                                  4⤵
                                                                                                                                    PID:565
                                                                                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                                                                    4⤵
                                                                                                                                      PID:566
                                                                                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                                                                      4⤵
                                                                                                                                        PID:567
                                                                                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                                                                        4⤵
                                                                                                                                          PID:568
                                                                                                                                        • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                          "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                                                                          4⤵
                                                                                                                                            PID:572
                                                                                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=71"
                                                                                                                                            4⤵
                                                                                                                                              PID:577
                                                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=91"
                                                                                                                                              4⤵
                                                                                                                                                PID:578
                                                                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,8466523637757309217,18066920000656673183,131072" "--seatbelt-client=91"
                                                                                                                                                4⤵
                                                                                                                                                  PID:579
                                                                                                                                                • /usr/bin/hdiutil
                                                                                                                                                  /usr/bin/hdiutil attach /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.0OEKAy/GoogleChrome-128.0.6613.138.dmg -plist -nobrowse -readonly
                                                                                                                                                  4⤵
                                                                                                                                                    PID:580
                                                                                                                                                  • /usr/libexec/xpcproxy
                                                                                                                                                    xpcproxy com.apple.hdiejectd
                                                                                                                                                    4⤵
                                                                                                                                                      PID:582
                                                                                                                                                    • /System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd
                                                                                                                                                      /System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd
                                                                                                                                                      4⤵
                                                                                                                                                        PID:582
                                                                                                                                                      • /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
                                                                                                                                                        /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid D0D3102C-9422-4117-85B7-33E849A17CC9
                                                                                                                                                        4⤵
                                                                                                                                                          PID:583
                                                                                                                                                        • /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
                                                                                                                                                          /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid D0D3102C-9422-4117-85B7-33E849A17CC9 -post-exec 4
                                                                                                                                                          4⤵
                                                                                                                                                            PID:584

                                                                                                                                                    Network

                                                                                                                                                          MITRE ATT&CK Enterprise v16

                                                                                                                                                          Replay Monitor

                                                                                                                                                          Loading Replay Monitor...

                                                                                                                                                          Downloads

                                                                                                                                                          visual_model.tflite

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/ClientSidePhishing/29.0/visual_model.tflite
                                                                                                                                                          • Size 3.0MB
                                                                                                                                                          • SHA256 d38a4cda8912f9598b8701dac7d5ee90eff324ed1fb9d277b9784fe45a4e6c72
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          settings.dat

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Crashpad/settings.dat
                                                                                                                                                          • Size 40B
                                                                                                                                                          • SHA256 5cca682cfa80faa97838327d83ef5a2cc39e21b0cf16639aa7c4f095bf1be4e6
                                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                                          Unconfirmed 548015.crdownload

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/Download Service/Files/Unconfirmed 548015.crdownload
                                                                                                                                                          • Size 31KB
                                                                                                                                                          • SHA256 19467aecaa7414ff700726608e8d3b852c37d7549f0bd6c64933d07dcb037f0d
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          f759ff87-4719-4855-8479-49afaa83a690

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/Download Service/Files/f759ff87-4719-4855-8479-49afaa83a690
                                                                                                                                                          • Size 258KB
                                                                                                                                                          • SHA256 8d21fe1bd251856bfaeaedd6a72ab78f153a047b6042e0fc614f57a32b56d340
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          CURRENT

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/CURRENT
                                                                                                                                                          • Size 16B
                                                                                                                                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                                          MANIFEST-000001

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/MANIFEST-000001
                                                                                                                                                          • Size 41B
                                                                                                                                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                                          craw_background.js

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.6_1/craw_background.js
                                                                                                                                                          • Size 531KB
                                                                                                                                                          • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          MANIFEST-000001

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/IndexedDB/https_pixelbattle.fun_0.indexeddb.leveldb/MANIFEST-000001
                                                                                                                                                          • Size 23B
                                                                                                                                                          • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                                          000003.ldb

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/Local Storage/leveldb/000003.ldb
                                                                                                                                                          • Size 339B
                                                                                                                                                          • SHA256 9cc80c0d1dfe7205c6530402c3240171966e72b6df8ef0e8571660fb18652cd5
                                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                                          000003.ldb

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/Session Storage/000003.ldb
                                                                                                                                                          • Size 569B
                                                                                                                                                          • SHA256 b7600cfe0aa091e9ab8540869b7ea120a62b36240acc0370c3fd62655b58bf4e
                                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                                          000003.ldb

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/000003.ldb
                                                                                                                                                          • Size 269B
                                                                                                                                                          • SHA256 241a349a63252a8026016a5ef0d713fc18f76735dd0c10963f9a693bfdb9b172
                                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                                          000003.ldb

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/Storage/ext/gfdkimpbcpahaombhbimeihdjnejgicl/def/Session Storage/000003.ldb
                                                                                                                                                          • Size 141B
                                                                                                                                                          • SHA256 085c44dfa11e65ac3548c4d0fe1ae641570f90c7caaa2881c3990efcf555e6a8
                                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                                          000003.ldb

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/000003.ldb
                                                                                                                                                          • Size 136B
                                                                                                                                                          • SHA256 935d36c021d0e08a5648c622f3f6fde376e3310013680ae598c0e22dc943d132
                                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                                          000003.ldb

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/000003.ldb
                                                                                                                                                          • Size 2KB
                                                                                                                                                          • SHA256 18b5270537241fdd8a8de2f4435bb9a19acc82d565bf629678c07360e0fa89d8
                                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                                          000003.ldb

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000003.ldb
                                                                                                                                                          • Size 288B
                                                                                                                                                          • SHA256 79b1150f1008ed3fbde59417e9727bce33a34ee2ac5b407eec1a82beabdd2c06
                                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                                          model.tflite

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/OptimizationGuidePredictionModels/92edbb2b-79f6-43ff-a8e6-d2e9e8b53435/model.tflite
                                                                                                                                                          • Size 382KB
                                                                                                                                                          • SHA256 a0956386dc64fd9f4883c8741f950cd60a56859616b159c9e4251c9eb0ac5534
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          Ruleset Data

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.32.0/Ruleset Data
                                                                                                                                                          • Size 138KB
                                                                                                                                                          • SHA256 fed1557c8b4e40813114db3b546c043105892dd0895c4d7c02d45a8be351173a
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          Ruleset Data

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.69.0/Ruleset Data
                                                                                                                                                          • Size 242KB
                                                                                                                                                          • SHA256 2423d96a2ca4ef2377603d236a6fa47a1dd412ff95a5f5a96a4cf9913c9cb444
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          Filtering Rules

                                                                                                                                                          • Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Unindexed Rules/9.69.0/Filtering Rules
                                                                                                                                                          • Size 152KB
                                                                                                                                                          • SHA256 12cfb6660bf36eac68d09ac8cad166a5135eceb12876863e716e61a98b7a2e01
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          login.keychain-db

                                                                                                                                                          • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                          • Size 114KB
                                                                                                                                                          • SHA256 66f54e3a9c32411128f9fff654c76bb0e8b9e002949ab56b7484c60c80c1b6da
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          login.keychain-db

                                                                                                                                                          • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                          • Size 114KB
                                                                                                                                                          • SHA256 0b2e02db62a94bf5a861c0ca113e1fae63497372d7936922db714326e6bca01e
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          login.keychain-db

                                                                                                                                                          • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                          • Size 112KB
                                                                                                                                                          • SHA256 4455e478a87c488d3c9f780d86dfddcfe50e8433bb720be8c2dab047706a00c3
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          login.keychain-db

                                                                                                                                                          • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                          • Size 114KB
                                                                                                                                                          • SHA256 9881e471b2ffc620d6b84195f9e9d296caa16f5345f1868268ff87ba0cac08c7
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          login.keychain-db

                                                                                                                                                          • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                          • Size 114KB
                                                                                                                                                          • SHA256 43a74bc4568054baf10aa2bfaaa04c4f2b87ec3d80dc5016d685e74242a775c6
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          login.keychain-db

                                                                                                                                                          • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                                          • Size 112KB
                                                                                                                                                          • SHA256 eeecaae8f338d9d225d0ff263034661b96fcfd4b22874bac9a406d470218618c
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          icon_128.png

                                                                                                                                                          • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dirWaSVer/CRX_INSTALL/images/icon_128.png
                                                                                                                                                          • Size 3KB
                                                                                                                                                          • SHA256 4f17efbd974a41d88cb36567aab6bf4586579e78780f00b1826676819e14bff4
                                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                                          icon_16.png

                                                                                                                                                          • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dirWaSVer/CRX_INSTALL/images/icon_16.png
                                                                                                                                                          • Size 531B
                                                                                                                                                          • SHA256 0a4bd08db6422f8e7a8a218ef39c1b99a5a675f12697f26be88f9afc2e1f9378
                                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                                          mdsDirectory.db

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db
                                                                                                                                                          • Size 47KB
                                                                                                                                                          • SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          mdsObject.db

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db
                                                                                                                                                          • Size 4KB
                                                                                                                                                          • SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          .com.google.Chrome.1DdvYN

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.1DdvYN
                                                                                                                                                          • Size 242KB
                                                                                                                                                          • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          eeigpngbgcognadeebkilcpcaedhellh_2025.06.13.084507_all_acip2yapafsolnpcvaohkisaowaq.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.2dy9zd/eeigpngbgcognadeebkilcpcaedhellh_2025.06.13.084507_all_acip2yapafsolnpcvaohkisaowaq.crx3
                                                                                                                                                          • Size 257KB
                                                                                                                                                          • SHA256 4497d8060d0e53c12b4403aa9ebe7e827d4880bae3f4139a26a4feb7ed64c4a2
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.4chmWM/dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3
                                                                                                                                                          • Size 136KB
                                                                                                                                                          • SHA256 0c24e9bd976adffa987e08fc54dc0950c84cf18f9cdb4c5caabc6acf24887c4f
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          efniojlnjndmcbiieegkicadnoecjjef_1707_all_ac4btl3icyfb6ppupdd2x2fn4mhq.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.60gI9P/efniojlnjndmcbiieegkicadnoecjjef_1707_all_ac4btl3icyfb6ppupdd2x2fn4mhq.crx3
                                                                                                                                                          • Size 374KB
                                                                                                                                                          • SHA256 58b44a2910d06a842e760cc52d03a6a8e311f71d4f4b5eed096ae01ea409c52e
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          khaoiebndkojlmppeemjhbpbandiljpe_145.0.7584.0_mac_adijmuudraws5pmse4bp2wpjlfpq.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.DTRbJN/khaoiebndkojlmppeemjhbpbandiljpe_145.0.7584.0_mac_adijmuudraws5pmse4bp2wpjlfpq.crx3
                                                                                                                                                          • Size 11KB
                                                                                                                                                          • SHA256 9f157bd09a986baa46110a0acb7e3d7407208e58d02250c637902962e5ed2c5e
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          laoigpblnllgcgjnjnllmfolckpjlhki_1.1.0.3_all_adwgvw4jdcarox4vlsm7t4gq257a.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.Et5UGq/laoigpblnllgcgjnjnllmfolckpjlhki_1.1.0.3_all_adwgvw4jdcarox4vlsm7t4gq257a.crx3
                                                                                                                                                          • Size 12KB
                                                                                                                                                          • SHA256 7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          lmelglejhemejginpboagddgdfbepgmp_701_all_ZZ_ad7w6p75muocvr5cluo7cuagqgra.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.H3TRCP/lmelglejhemejginpboagddgdfbepgmp_701_all_ZZ_ad7w6p75muocvr5cluo7cuagqgra.crx3
                                                                                                                                                          • Size 546KB
                                                                                                                                                          • SHA256 b561f407bc93a86cf83a2e9f3cb4411a8f49b28d7bafe84962505b4d4eade35f
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          jflookgnkcckhobaglndicnbbgbonegd_3091_all_adfb4phbxwqsxsfvrtgwwtg25z6a.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.NhkF7X/jflookgnkcckhobaglndicnbbgbonegd_3091_all_adfb4phbxwqsxsfvrtgwwtg25z6a.crx3
                                                                                                                                                          • Size 184KB
                                                                                                                                                          • SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          obedbbhbpmojnkanicioggnmelmoomoc_20251024.824731831.14_all_ENGB500000_lof45en2yrc2tvvdfc42hhgnkq.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.Nq9F2t/obedbbhbpmojnkanicioggnmelmoomoc_20251024.824731831.14_all_ENGB500000_lof45en2yrc2tvvdfc42hhgnkq.crx3
                                                                                                                                                          • Size 7.6MB
                                                                                                                                                          • SHA256 95ff39d8ef1186d8b10dd3a57c6a4a426732b5fca36bdea4670fc4eb0f0b04b5
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          gonpemdgkjcecdgbnaabipppbmgfggbe_2025.07.24.00_all_hou4jz7zmeg5zedchpigdjxhve.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.dX9EwJ/gonpemdgkjcecdgbnaabipppbmgfggbe_2025.07.24.00_all_hou4jz7zmeg5zedchpigdjxhve.crx3
                                                                                                                                                          • Size 16KB
                                                                                                                                                          • SHA256 56c21927faa028be6ce18c931660eec37e41da4bfbfd47cafa48350f828c0dbd
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.fE8f32/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3
                                                                                                                                                          • Size 2.4MB
                                                                                                                                                          • SHA256 9738a550f51cdfb80146b1620b40a37d58c5136254ee1f0f03c20a864fab89d2
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.10.19.1145_all_ac7cecrzrmfngskhgmtk6zmhfjoa.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.fEdqr2/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.10.19.1145_all_ac7cecrzrmfngskhgmtk6zmhfjoa.crx3
                                                                                                                                                          • Size 10KB
                                                                                                                                                          • SHA256 e3a7322843834a5270a01c56533a34a24b1a253e3bda6f14046e10d818446165
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.69.0_all_cel3rbdd7bqradmivgopr4ugpa.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.fwXBbZ/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.69.0_all_cel3rbdd7bqradmivgopr4ugpa.crx3
                                                                                                                                                          • Size 180KB
                                                                                                                                                          • SHA256 6782f4e9b12bd4f38a701caf825445aa82f36f7cb81cc3fb19ee6f326eba1d1c
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          hfnkpimlhhgieaddgfemjhofmfblmnib_10621_all_pz4bv4cfmt6lvaxkp4uqgt2rbu.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.gW1WqY/hfnkpimlhhgieaddgfemjhofmfblmnib_10621_all_pz4bv4cfmt6lvaxkp4uqgt2rbu.crx3
                                                                                                                                                          • Size 29KB
                                                                                                                                                          • SHA256 81f973cc7d50d2b0f85ce8a4afc98716ab8db4242610c98b8cc58755bb0b299e
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                          ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3

                                                                                                                                                          • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.hprGp5/ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3
                                                                                                                                                          • Size 857KB
                                                                                                                                                          • SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH