a665cd40efaca89e9257d083328e13446428281d133895f984e847d93634e736

Analysis

max time kernel
146s
max time network
154s
platform
macos_amd64
resource
macos-20220504-en
resource tags

arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
17-03-2023 11:45

Target

Payload/XAgent.app/ResourceRules.plist
Size

150B
MD5

343655cf7ac69ec78afea2e00423b7d6
SHA1

77f6e5da222ac70384e08056023c832d7255c0ba
SHA256

a35932ed4b21efa85742016317340e6b3764d62e3485f91554030fcb43a6f1bb
SHA512

f15bbc7d001b75384923d4f7810cd57877e82410cf448e8e739ba86d60bdf87a4fbeeb945952a22c87eebad73ebb72705cc9f3eb8d88e858cb111cfd330344ee

Score

1^/10

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/ResourceRules.plist\""
1⤵
PID:504

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/ResourceRules.plist\""
1⤵
PID:504

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/XAgent.app/ResourceRules.plist\""
1⤵
PID:504

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Payload/XAgent.app/ResourceRules.plist
1⤵
PID:504

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Payload/XAgent.app/ResourceRules.plist
1⤵
PID:504
- /bin/zsh
  /bin/zsh -c /Users/run/Payload/XAgent.app/ResourceRules.plist
  2⤵
  PID:511
- /bin/zsh
  /bin/zsh -c /Users/run/Payload/XAgent.app/ResourceRules.plist
  2⤵
  PID:511
- /Users/run/Payload/XAgent.app/ResourceRules.plist
  /Users/run/Payload/XAgent.app/ResourceRules.plist
  2⤵
  PID:511
- /Users/run/Payload/XAgent.app/ResourceRules.plist
  /Users/run/Payload/XAgent.app/ResourceRules.plist
  2⤵
  PID:511

/usr/bin/syslog
/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
1⤵
PID:505