Macos used runonly to avoid detection