1f1ad9c1f639326946f39129cb9ff5015669a0a3dd9e21db07163fb48cb6b709

Analysis

max time kernel
97s
max time network
126s
platform
macos-10.15_amd64
resource
macos-20240711.1-en
resource tags

arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
06/08/2024, 21:50

Target

$PLUGINSDIR/InstallOptions.dll
Size

15KB
MD5

d095b082b7c5ba4665d40d9c5042af6d
SHA1

2220277304af105ca6c56219f56f04e894b28d27
SHA256

b2091205e225fc07daf1101218c64ce62a4690cacac9c3d0644d12e93e4c213c
SHA512

61fb5cf84028437d8a63d0fda53d9fe0f521d8fe04e96853a5b7a22050c4c4fb5528ff0cdbb3ae6bc74a5033563fc417fc7537e4778227c9fd6633ae844c47d9
SSDEEP

192:EyGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoTr11929WtshLAzgSrX8:EyNt+4t7uJalUnGesY7Lt8nCr/Yosa

Score

1^/10

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/\$PLUGINSDIR/InstallOptions.dll\""
1⤵
PID:490

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/\$PLUGINSDIR/InstallOptions.dll\""
1⤵
PID:490

/usr/bin/sudo
sudo /bin/zsh -c /Users/run//InstallOptions.dll
1⤵
PID:490
- /bin/zsh
  /bin/zsh -c /Users/run//InstallOptions.dll
  2⤵
  PID:493
- /Users/run//InstallOptions.dll
  /Users/run//InstallOptions.dll
  2⤵
  PID:493

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:529

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:529

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:534

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:535