6f80f09027d7fd651dbd0ee4f611b1f52020d980cb1044443b126738f70d1522

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
max time kernel
355s
max time network
905s
platform
macos-10.15_amd64
resource
macos-20250619-en
resource tags

arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
26/08/2026, 11:02

Target
SKlauncher/.fseventsd/0000000040b75563.gz
Size 72B
Sample260826-m5hlcsvsaz
SHA256 6f80f09027d7fd651dbd0ee4f611b1f52020d980cb1044443b126738f70d1522
MD5 589599fa2c799a833191bc6fa13ca117
SHA1 78b930a952eb7db2e0314fa8ab1f87512f630298
SHA512 49ed75c47e63ba3012ba3da365fddb3353a7946b9127458bf712a9c18e618fbc6e6429edb4a0095f84922834eec1e4f63a212fc5fe20f091c1ab995b4736371e
TLSH
T1F6A0027D2822FD21F4406338C11D3A974C45EDC629448D6C44EF79CC65C9656AD96DAC
MD5 SHA1 SHA512 TLSH

Score

1^/10

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/SKlauncher/.fseventsd/0000000040b75563.gz\""
1⤵
PID:474

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/SKlauncher/.fseventsd/0000000040b75563.gz\""
1⤵
PID:474

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/SKlauncher/.fseventsd/0000000040b75563.gz
1⤵
PID:474
- /bin/zsh
  /bin/zsh -c /Users/run/SKlauncher/.fseventsd/0000000040b75563.gz
  2⤵
  PID:476
- /Users/run/SKlauncher/.fseventsd/0000000040b75563.gz
  /Users/run/SKlauncher/.fseventsd/0000000040b75563.gz
  2⤵
  PID:476

/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
1⤵
PID:513

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:515

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:515

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:516

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:517