Benign Download

RuntimeProtections.html

Loads external script elementHTML anchor download attribute

SHA-256dab50b9a4a9a7794cf1aa75372a385531cc18f180d7fe5ef1eee60060dd48df0

URLhttps://developer.apple.com/library/archive/documentation/Security/Conceptual/System_Integrity_Protection_Guide/RuntimeProtections/RuntimeProtections.html

MaleculeO(C)H₂(CmOs)

Evidence

Documentation page terminology lines 20–21

20:14… "reflib" name="reflib" content="Documentation Archive">
21    <meta id="book-assignments" name="book-assignment …

Loads external script element lines 41–48

31… ipt">
  /* RSID: */
  var s_account="awdappledeveloper"
  </script>
45
  <script type="text/javascript" src="https://developer.apple.com/assets/metrics/scripts/analytics.js"></script>
  <script type="text/javascript">
  s.channel="www.docume …

HTML anchor download attribute lines 72–75

43… n Guide</h1>
          <span id="file_links">
              <a id="PDF_link" role="button" tabindex='4' rel="alternate" title="Download PDF"><span id="pdf_icon"></span>PDF</a>
              <a id="Companion_link" role="button" tabindex='3' title="Download Compa …

Invokes sudo or doas to elevate line 99

99:1548… to a system process, such as with LLDB, fails—even when running as root with sudo:</p><div class="codesample clear"><table><tr><td scope="row"><pre>$&gt; sudo lldb -n Finder<span></span></pre></td></tr><tr><td scope="row"><pre>(lldb) process attach —name "Finder"<span></span></pre></td></ …