hxxps://www[.]indianaunclaimed[.]gov/app/claim-search?utm_source=Adwords&utm_campaign=IndianaOAG_sammy-terry-april-15_20240408&utm_medium=Video&utm_content=sammy-terry-april-15&utm_agency=PG&gclid=CjwKCAjwz42xBhB9EiwA48pT7wtgVqVsXj78Yjf6YJCs4c1bGUg_LIDMfQi6b4Acl2GoGLGYk6ep8BoCSuEQAvD_BwE

Analysis

max time kernel
122s
max time network
152s
platform
macos-10.15_amd64
resource
macos-20240410-en
resource tags

arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
20-04-2024 21:38

Target

https://www.indianaunclaimed.gov/app/claim-search?utm_source=Adwords&utm_campaign=IndianaOAG_sammy-terry-april-15_20240408&utm_medium=Video&utm_content=sammy-terry-april-15&utm_agency=PG&gclid=CjwKCAjwz42xBhB9EiwA48pT7wtgVqVsXj78Yjf6YJCs4c1bGUg_LIDMfQi6b4Acl2GoGLGYk6ep8BoCSuEQAvD_BwE

Score

1^/10

/bin/sh
sh -c "sudo /bin/zsh -c \"/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.indianaunclaimed.gov/app/claim-search?utm_source=Adwords&utm_campaign=IndianaOAG_sammy-terry-april-15_20240408&utm_medium=Video&utm_content=sammy-terry-april-15&utm_agency=PG&gclid=CjwKCAjwz42xBhB9EiwA48pT7wtgVqVsXj78Yjf6YJCs4c1bGUg_LIDMfQi6b4Acl2GoGLGYk6ep8BoCSuEQAvD_BwE\""
1⤵
PID:484

/bin/bash
sh -c "sudo /bin/zsh -c \"/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.indianaunclaimed.gov/app/claim-search?utm_source=Adwords&utm_campaign=IndianaOAG_sammy-terry-april-15_20240408&utm_medium=Video&utm_content=sammy-terry-april-15&utm_agency=PG&gclid=CjwKCAjwz42xBhB9EiwA48pT7wtgVqVsXj78Yjf6YJCs4c1bGUg_LIDMfQi6b4Acl2GoGLGYk6ep8BoCSuEQAvD_BwE\""
1⤵
PID:484

/usr/bin/sudo
sudo /bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.indianaunclaimed.gov/app/claim-search?utm_source=Adwords&utm_campaign=IndianaOAG_sammy-terry-april-15_20240408&utm_medium=Video&utm_content=sammy-terry-april-15&utm_agency=PG&gclid=CjwKCAjwz42xBhB9EiwA48pT7wtgVqVsXj78Yjf6YJCs4c1bGUg_LIDMfQi6b4Acl2GoGLGYk6ep8BoCSuEQAvD_BwE"
1⤵
PID:484

/bin/zsh
/bin/zsh -c "/Applications/Google\\ Chrome.app/Contents/MacOS/Google\\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.indianaunclaimed.gov/app/claim-search?utm_source=Adwords&utm_campaign=IndianaOAG_sammy-terry-april-15_20240408&utm_medium=Video&utm_content=sammy-terry-april-15&utm_agency=PG&gclid=CjwKCAjwz42xBhB9EiwA48pT7wtgVqVsXj78Yjf6YJCs4c1bGUg_LIDMfQi6b4Acl2GoGLGYk6ep8BoCSuEQAvD_BwE"
2⤵
PID:486

/usr/bin/pluginkit
/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync
1⤵
PID:491

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdater0BF23177/OneDrive.app
1⤵
PID:492

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
1⤵
PID:528

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:542

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:543