
MDS_CDSADI R_EMM_RECO RDTYPE.L.!.% S_CDSADIR_ EMM_PRIMAR Y_RECORDTY PE.H.MDS_CD SADIR_COMM ON_RECORDT YPE.L.

CSSM_DL_ DB_SCHEMA_ PARSING_MO DULE.D.MDS_CD SADIR_CSSM _RECORDTYP E.D.!. !.%.CSSM _DL_DB_SCH EMA_ATTRIB UTES.D.!.%.CSSM_D L_DB_SCHEM A_INDEXES.H.!. System or server version plist file read: /System/Li brary/Core Services/S ystemVersi on.plist Reads the system or server version plist file Uses AppleKeyboardLayouts bundle containing keyboard layoutsĪppleKeyboardLayouts info plist opened: /System/Li brary/Keyb oard Layou ts/AppleKe yboardLayo uts.bundle /Contents/ ist Security framework info plist opened: /System/Li brary/Fram eworks/Sec am ework/Reso urces/Info. Uses Security framework containing interfaces for system-level user authentication and authorization Uses CFNetwork bundle containing interfaces for network communication (HTTP, sockets, and Bonjour)ĬFNetwork info plist opened: /System/Li brary/Fram eworks/CFN a mework/Res ources/Inf o.plist Launchservices plist file read: /System/Li brary/Pref erences/Lo gging/Subs ystems/com. Source: /System/Li brary/Core Services/I nstaller.a pp/Content s/MacOS/In staller (P ID: 570) String found in binary or memory: tallstat.m /mystartto olbar_inst all_mac.ph p?homepage =$setHomeO ffer&searc h_provider String found in binary or memory: tallstat.m /dm.php?ac tion=eula_ show&versi on=7.3.1.0 &uid=$ String found in binary or memory: tallstat.m /dm.php?ac tion=eula_ show&versi on=$packag eVersion

UDP traffic detected without corresponding DNS query: 1.1.1.1 Connects to IPs without corresponding DNS lookups
