Analysis

  • user interaction
    yes
  • max time kernel
    86s
  • max time network
    87s
  • platform
    macos-10.15_amd64
  • resource
    macos-20250619-en
  • resource tags

    arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    27/07/2026, 22:13

General

  • Target
    https://alzaes.com/c/9548809689/7f39f0bc/
  • Sample260727-15fcwseq6s
Score
4/10

Malware Config

Signatures

  • Resource Forking 1 TTPs 4 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

Processes

  • /usr/libexec/xpcproxy
    xpcproxy com.apple.newsyslog
    1⤵
      PID:480
    • /usr/libexec/xpcproxy
      xpcproxy com.oracle.java.Java-Updater
      1⤵
        PID:481
      • /bin/sh
        sh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window 'https://alzaes.com/c/9548809689/7f39f0bc/'"
        1⤵
          PID:485
        • /bin/bash
          sh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window 'https://alzaes.com/c/9548809689/7f39f0bc/'"
          1⤵
            PID:485
          • /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater
            "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater" -bgcheck
            1⤵
              PID:481
            • /usr/sbin/newsyslog
              /usr/sbin/newsyslog
              1⤵
                PID:480
              • /Applications/Google Chrome.app/Contents/MacOS/Google Chrome
                "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" "--simulate-outdated-no-au=Tue, 31 Dec 2099" --new-window https://alzaes.com/c/9548809689/7f39f0bc/
                1⤵
                  PID:485
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.GameController.gamecontrollerd
                  1⤵
                    PID:503
                  • /usr/libexec/gamecontrollerd
                    /usr/libexec/gamecontrollerd
                    1⤵
                      PID:503
                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler
                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler" "--monitor-self-annotation=ptype=crashpad-handler" "--database=/Users/run/Library/Application Support/Google/Chrome/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=channel=" "--annotation=plat=OS X" "--annotation=prod=Chrome_Mac" "--annotation=ver=101.0.4951.54" "--handshake-fd=9"
                      1⤵
                        PID:506
                      • /usr/bin/profiles
                        /usr/bin/profiles status -type enrollment
                        1⤵
                          PID:510
                        • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall
                          "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz"
                          1⤵
                            PID:512
                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize
                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize" com.google.Chrome
                            1⤵
                              PID:513
                            • /usr/bin/tar
                              /usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist
                              1⤵
                                PID:515
                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)
                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)" "--type=gpu-process" "--gpu-preferences=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" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=32"
                                1⤵
                                  PID:516
                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=network.mojom.NetworkService" "--lang=en-GB" "--service-sandbox-type=network" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=24"
                                  1⤵
                                    PID:519
                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=storage.mojom.StorageService" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=31"
                                    1⤵
                                      PID:520
                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)
                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)" "--type=utility" "--utility-sub-type=mac_notifications.mojom.MacNotificationProvider" "--lang=en-GB" "--service-sandbox-type=none" --message-loop-type-ui --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072"
                                      1⤵
                                        PID:521
                                      • /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
                                        /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded
                                        1⤵
                                          PID:522
                                        • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                          "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=7" "--launch-time-ticks=280423350" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=64"
                                          1⤵
                                            PID:523
                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=6" "--launch-time-ticks=280490217" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=23"
                                            1⤵
                                              PID:524
                                            • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                              "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake-all --system
                                              1⤵
                                                PID:525
                                              • /Users/run/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                "/Users/run/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake-all
                                                1⤵
                                                  PID:526
                                                • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                  "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=4"
                                                  1⤵
                                                    PID:1.8446744073709552e+19
                                                  • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                    "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --wake --system
                                                    1⤵
                                                      PID:529
                                                    • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                      "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=4"
                                                      1⤵
                                                        PID:0
                                                        • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/Helpers/launcher
                                                          "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/Helpers/launcher" --internal
                                                          2⤵
                                                            PID:532
                                                          • /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin
                                                            /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin --productid com.google.Chrome --print-tickets --store /Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
                                                            2⤵
                                                              PID:533
                                                            • /usr/libexec/xpcproxy
                                                              xpcproxy com.apple.SafariLaunchAgent
                                                              2⤵
                                                                PID:534
                                                              • /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
                                                                /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
                                                                2⤵
                                                                  PID:534
                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=8" "--launch-time-ticks=283336770" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=76"
                                                                  2⤵
                                                                    PID:535
                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=12" "--launch-time-ticks=283549893" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=78"
                                                                    2⤵
                                                                      PID:536
                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=10" "--launch-time-ticks=283743014" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=80"
                                                                      2⤵
                                                                        PID:537
                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=11" "--launch-time-ticks=283950944" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=81"
                                                                        2⤵
                                                                          PID:538
                                                                        • /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher
                                                                          "/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher"
                                                                          2⤵
                                                                            PID:539
                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=85"
                                                                            2⤵
                                                                              PID:540
                                                                            • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                              GoogleUpdater --server "--service=update-internal" --system
                                                                              2⤵
                                                                                PID:1.8446744073709552e+19
                                                                              • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
                                                                                2⤵
                                                                                  PID:1.8446744073709552e+19
                                                                                • /usr/sbin/system_profiler
                                                                                  /usr/sbin/system_profiler SPConfigurationProfileDataType -detailLevel mini -timeout 15 -xml
                                                                                  2⤵
                                                                                    PID:544
                                                                                  • /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher
                                                                                    "/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/Helpers/launcher"
                                                                                    2⤵
                                                                                      PID:545
                                                                                    • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                      GoogleUpdater --server "--service=update" --system
                                                                                      2⤵
                                                                                        PID:0
                                                                                        • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                          "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
                                                                                          3⤵
                                                                                            PID:1.8446744073709552e+19
                                                                                          • /usr/bin/profiles
                                                                                            /usr/bin/profiles status -type enrollment
                                                                                            3⤵
                                                                                              PID:551
                                                                                            • /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin
                                                                                              /Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin -P com.google.Chrome --delete --store /Users/run/Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore
                                                                                              3⤵
                                                                                                PID:552
                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=71"
                                                                                                3⤵
                                                                                                  PID:553
                                                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=75"
                                                                                                  3⤵
                                                                                                    PID:554
                                                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=111"
                                                                                                    3⤵
                                                                                                      PID:556
                                                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=116"
                                                                                                      3⤵
                                                                                                        PID:557
                                                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=115"
                                                                                                        3⤵
                                                                                                          PID:558
                                                                                                        • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                                          GoogleUpdater --server "--service=update" --system
                                                                                                          3⤵
                                                                                                            PID:1.8446744073709552e+19
                                                                                                          • /Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater
                                                                                                            "/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/GoogleUpdater.app/Contents/MacOS/GoogleUpdater" --crash-handler --system "--database=/Library/Application Support/Google/GoogleUpdater/128.0.6597.0/Crashpad" "--url=https://clients2.google.com/cr/report" "--annotation=prod=Update4" "--annotation=ver=128.0.6597.0" "--handshake-fd=5"
                                                                                                            3⤵
                                                                                                              PID:1.8446744073709552e+19
                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)
                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)" "--type=renderer" --extension-process --display-capture-permissions-policy-allowed "--lang=en-GB" "--num-raster-threads=1" --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources "--renderer-client-id=20" "--launch-time-ticks=298906477" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=123"
                                                                                                              3⤵
                                                                                                                PID:562
                                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=77"
                                                                                                                3⤵
                                                                                                                  PID:568
                                                                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=data_decoder.mojom.DataDecoderService" "--lang=en-GB" "--service-sandbox-type=service" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=123"
                                                                                                                  3⤵
                                                                                                                    PID:580
                                                                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=123"
                                                                                                                    3⤵
                                                                                                                      PID:581
                                                                                                                    • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                      "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=99"
                                                                                                                      3⤵
                                                                                                                        PID:582
                                                                                                                      • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                        "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=99"
                                                                                                                        3⤵
                                                                                                                          PID:584
                                                                                                                        • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                          "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=99"
                                                                                                                          3⤵
                                                                                                                            PID:586
                                                                                                                          • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                            "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=71"
                                                                                                                            3⤵
                                                                                                                              PID:587
                                                                                                                            • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                              "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=71"
                                                                                                                              3⤵
                                                                                                                                PID:588
                                                                                                                              • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=71"
                                                                                                                                3⤵
                                                                                                                                  PID:589
                                                                                                                                • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                  "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=71"
                                                                                                                                  3⤵
                                                                                                                                    PID:590
                                                                                                                                  • /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
                                                                                                                                    "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper" "--type=utility" "--utility-sub-type=unzip.mojom.Unzipper" "--lang=en-GB" "--service-sandbox-type=utility" --shared-files "--field-trial-handle=1718379636,r,11238792904489045655,2468616575369269403,131072" "--seatbelt-client=99"
                                                                                                                                    3⤵
                                                                                                                                      PID:591

                                                                                                                                Network

                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                      Replay Monitor

                                                                                                                                      Loading Replay Monitor...

                                                                                                                                      Downloads

                                                                                                                                      settings.dat

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Crashpad/settings.dat
                                                                                                                                      • Size 40B
                                                                                                                                      • SHA256 5cca682cfa80faa97838327d83ef5a2cc39e21b0cf16639aa7c4f095bf1be4e6
                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                      6c2ceb3d-f555-441a-bfe2-99f1cffe2785

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Download Service/Files/6c2ceb3d-f555-441a-bfe2-99f1cffe2785
                                                                                                                                      • Size 258KB
                                                                                                                                      • SHA256 8d21fe1bd251856bfaeaedd6a72ab78f153a047b6042e0fc614f57a32b56d340
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      Unconfirmed 716563.crdownload

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Download Service/Files/Unconfirmed 716563.crdownload
                                                                                                                                      • Size 21KB
                                                                                                                                      • SHA256 5721e7e10140da1a448888086f58b3b8e8fa235826a773c9f2f69157cde0b2a5
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      CURRENT

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/CURRENT
                                                                                                                                      • Size 16B
                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                      MANIFEST-000001

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Extension Scripts/MANIFEST-000001
                                                                                                                                      • Size 41B
                                                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                      craw_background.js

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.6_1/craw_background.js
                                                                                                                                      • Size 531KB
                                                                                                                                      • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      000003.ldb

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Local Storage/leveldb/000003.ldb
                                                                                                                                      • Size 339B
                                                                                                                                      • SHA256 9cc80c0d1dfe7205c6530402c3240171966e72b6df8ef0e8571660fb18652cd5
                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                      000003.ldb

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Session Storage/000003.ldb
                                                                                                                                      • Size 569B
                                                                                                                                      • SHA256 b7600cfe0aa091e9ab8540869b7ea120a62b36240acc0370c3fd62655b58bf4e
                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                      000003.ldb

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/000003.ldb
                                                                                                                                      • Size 269B
                                                                                                                                      • SHA256 241a349a63252a8026016a5ef0d713fc18f76735dd0c10963f9a693bfdb9b172
                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                      000003.ldb

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Storage/ext/gfdkimpbcpahaombhbimeihdjnejgicl/def/Session Storage/000003.ldb
                                                                                                                                      • Size 141B
                                                                                                                                      • SHA256 085c44dfa11e65ac3548c4d0fe1ae641570f90c7caaa2881c3990efcf555e6a8
                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                      000003.ldb

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/000003.ldb
                                                                                                                                      • Size 136B
                                                                                                                                      • SHA256 935d36c021d0e08a5648c622f3f6fde376e3310013680ae598c0e22dc943d132
                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                      000003.ldb

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/000003.ldb
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 18b5270537241fdd8a8de2f4435bb9a19acc82d565bf629678c07360e0fa89d8
                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                      000003.ldb

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000003.ldb
                                                                                                                                      • Size 288B
                                                                                                                                      • SHA256 79b1150f1008ed3fbde59417e9727bce33a34ee2ac5b407eec1a82beabdd2c06
                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                      model.tflite

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/OptimizationGuidePredictionModels/4216ec0a-2f24-40bb-bae3-8b479742c187/model.tflite
                                                                                                                                      • Size 382KB
                                                                                                                                      • SHA256 a0956386dc64fd9f4883c8741f950cd60a56859616b159c9e4251c9eb0ac5534
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      Ruleset Data

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.32.0/Ruleset Data
                                                                                                                                      • Size 138KB
                                                                                                                                      • SHA256 fed1557c8b4e40813114db3b546c043105892dd0895c4d7c02d45a8be351173a
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      Ruleset Data

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.70.0/Ruleset Data
                                                                                                                                      • Size 242KB
                                                                                                                                      • SHA256 cc9b02f3f064329064c03d467d316f75aa26f670625cf09aa5291a75e875bb9c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      Filtering Rules

                                                                                                                                      • Path /Users/run/Library/Application Support/Google/Chrome/Subresource Filter/Unindexed Rules/9.70.0/Filtering Rules
                                                                                                                                      • Size 152KB
                                                                                                                                      • SHA256 6b7e98d71a5d85202f359344828ac98b03c41e5887a13189a053350ef3263a0f
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      login.keychain-db

                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                      • Size 114KB
                                                                                                                                      • SHA256 85209ae14a003eb4d7f5fe2d32e877965b03b16d08aea5653dcffa0973172b6b
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      login.keychain-db

                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                      • Size 114KB
                                                                                                                                      • SHA256 770e0a69b35588fb12c13255d880dab814e13075436bf3f34521d1d242a98cd9
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      login.keychain-db

                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                      • Size 112KB
                                                                                                                                      • SHA256 e3a03ce63e5e7693d28f13601e1ed1e2aa8f6b34e1bc303edccf670b5097b0c2
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      login.keychain-db

                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                      • Size 114KB
                                                                                                                                      • SHA256 37f9ca8b04de8915431a16b9f0f2a67ed7aadbae61425372949498ce4f70dfe5
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      login.keychain-db

                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                      • Size 114KB
                                                                                                                                      • SHA256 bc03b62e7691345d18aadbac3fda9c9ec835f87a576d3924e1c6ae8e44972349
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      login.keychain-db

                                                                                                                                      • Path /Users/run/Library/Keychains/login.keychain-db
                                                                                                                                      • Size 112KB
                                                                                                                                      • SHA256 72a89d0f7512fee37cac43e9ac72b39dc70ff8ae5fc578cbc08c5ab92326ea4c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      icon_128.png

                                                                                                                                      • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dir7KtqDi/CRX_INSTALL/images/icon_128.png
                                                                                                                                      • Size 3KB
                                                                                                                                      • SHA256 4f17efbd974a41d88cb36567aab6bf4586579e78780f00b1826676819e14bff4
                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                      icon_16.png

                                                                                                                                      • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/scoped_dir7KtqDi/CRX_INSTALL/images/icon_16.png
                                                                                                                                      • Size 531B
                                                                                                                                      • SHA256 0a4bd08db6422f8e7a8a218ef39c1b99a5a675f12697f26be88f9afc2e1f9378
                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                      mdsDirectory.db

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db
                                                                                                                                      • Size 47KB
                                                                                                                                      • SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      mdsObject.db

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db
                                                                                                                                      • Size 4KB
                                                                                                                                      • SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      obedbbhbpmojnkanicioggnmelmoomoc_20251024.824731831.14_all_ENGB500000_lof45en2yrc2tvvdfc42hhgnkq.crx3

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.2GWeLQ/obedbbhbpmojnkanicioggnmelmoomoc_20251024.824731831.14_all_ENGB500000_lof45en2yrc2tvvdfc42hhgnkq.crx3
                                                                                                                                      • Size 7.6MB
                                                                                                                                      • SHA256 95ff39d8ef1186d8b10dd3a57c6a4a426732b5fca36bdea4670fc4eb0f0b04b5
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      .com.google.Chrome.HZpDxX

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.HZpDxX
                                                                                                                                      • Size 242KB
                                                                                                                                      • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      efniojlnjndmcbiieegkicadnoecjjef_1728_all_adgwdr7xly63s4w7npf4nxu3gyoa.crx3

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.Hj3jip/efniojlnjndmcbiieegkicadnoecjjef_1728_all_adgwdr7xly63s4w7npf4nxu3gyoa.crx3
                                                                                                                                      • Size 373KB
                                                                                                                                      • SHA256 8f2c0712b6800fa9622a039cb167cc9503d508a271247e445f08a96eded5772f
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      lmelglejhemejginpboagddgdfbepgmp_715_all_ZZ_acozhdi5zrwgmrw4lhcmsswpu4qq.crx3

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.NIPdTx/lmelglejhemejginpboagddgdfbepgmp_715_all_ZZ_acozhdi5zrwgmrw4lhcmsswpu4qq.crx3
                                                                                                                                      • Size 556KB
                                                                                                                                      • SHA256 ce74b9332fb99d2641699568857fae1af09af981c7db763d3cb68cc9bdcc50db
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      khaoiebndkojlmppeemjhbpbandiljpe_145.0.7584.0_mac_adijmuudraws5pmse4bp2wpjlfpq.crx3

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.WPkKCB/khaoiebndkojlmppeemjhbpbandiljpe_145.0.7584.0_mac_adijmuudraws5pmse4bp2wpjlfpq.crx3
                                                                                                                                      • Size 11KB
                                                                                                                                      • SHA256 9f157bd09a986baa46110a0acb7e3d7407208e58d02250c637902962e5ed2c5e
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.70.0_all_gze4pzamdfkushbzoar2cohifm.crx3

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.dK4Gp3/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.70.0_all_gze4pzamdfkushbzoar2cohifm.crx3
                                                                                                                                      • Size 180KB
                                                                                                                                      • SHA256 733776833212346a1018b95197c61bed2d107fbb7790a985ef692780e02f31cb
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      jflookgnkcckhobaglndicnbbgbonegd_3091_all_adfb4phbxwqsxsfvrtgwwtg25z6a.crx3

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.gq1uwj/jflookgnkcckhobaglndicnbbgbonegd_3091_all_adfb4phbxwqsxsfvrtgwwtg25z6a.crx3
                                                                                                                                      • Size 184KB
                                                                                                                                      • SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.gsz1XO/dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3
                                                                                                                                      • Size 136KB
                                                                                                                                      • SHA256 0c24e9bd976adffa987e08fc54dc0950c84cf18f9cdb4c5caabc6acf24887c4f
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      laoigpblnllgcgjnjnllmfolckpjlhki_1.1.0.3_all_adwgvw4jdcarox4vlsm7t4gq257a.crx3

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.ljaWzY/laoigpblnllgcgjnjnllmfolckpjlhki_1.1.0.3_all_adwgvw4jdcarox4vlsm7t4gq257a.crx3
                                                                                                                                      • Size 12KB
                                                                                                                                      • SHA256 7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                      ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3

                                                                                                                                      • Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/.com.google.Chrome.roz1lb/ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3
                                                                                                                                      • Size 857KB
                                                                                                                                      • SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH