a665cd40efaca89e9257d083328e13446428281d133895f984e847d93634e736

Analysis

max time kernel
140s
max time network
143s
platform
macos_amd64
resource
macos-20220504-en
resource tags

arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
17-03-2023 11:45

Target

Payload/XAgent.app/XAgent.xcent
Size

316B
MD5

c3a90ef88350ff2f1fdf8687c75b79c6
SHA1

37a91e815e2863070fcb3244bf612233d8f78d82
SHA256

adbd702f7ceb80c44bce882677d3b9ba002843970bfe9158104069b471486005
SHA512

a1d60d49699b166f5b069f4f6cd9c9d315c56350816f0e830f7f7ac8b49453f657ffaab3dbd13d1c5caa05af6723f7f3609066e21546a1ed18daa154f2c01d91

Score

1^/10

/usr/bin/syslog
/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
1⤵
PID:496

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/XAgent.xcent\""
1⤵
PID:497

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/XAgent.xcent\""
1⤵
PID:497

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/XAgent.xcent\""
1⤵
PID:497

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Payload/XAgent.app/XAgent.xcent
1⤵
PID:497

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Payload/XAgent.app/XAgent.xcent
1⤵
PID:497
- /bin/zsh
  /bin/zsh -c /Users/run/Payload/XAgent.app/XAgent.xcent
  2⤵
  PID:500
- /bin/zsh
  /bin/zsh -c /Users/run/Payload/XAgent.app/XAgent.xcent
  2⤵
  PID:500
- /Users/run/Payload/XAgent.app/XAgent.xcent
  /Users/run/Payload/XAgent.app/XAgent.xcent
  2⤵
  PID:500
- /Users/run/Payload/XAgent.app/XAgent.xcent
  /Users/run/Payload/XAgent.app/XAgent.xcent
  2⤵
  PID:500