09f9788e9cbdd3c1afba9adf01608b40

Hash

  • MD5: 09f9788e9cbdd3c1afba9adf01608b40
  • SHA1: d8849b95c64df7e807583e23fa0505cf870004d6
  • SHA256: 808e7154b7af2bc7a4b28d577297c55f77221c355191cbe00f9f1810b6d4a619
  • First Seen: 2026-06-08
  • Last Seen: 2026-06-08
Shortcuts: Hybrid Analysis MalwareBazaar Virustotal

Additional Information

VirusTotal
                {
    "data": {
        "id": "808e7154b7af2bc7a4b28d577297c55f77221c355191cbe00f9f1810b6d4a619",
        "type": "file",
        "links": {
            "self": "https://www.virustotal.com/api/v3/files/808e7154b7af2bc7a4b28d577297c55f77221c355191cbe00f9f1810b6d4a619"
        },
        "attributes": {
            "sha256": "808e7154b7af2bc7a4b28d577297c55f77221c355191cbe00f9f1810b6d4a619",
            "reputation": 0,
            "tlsh": "T19BF31853372C1986C11DB03A89B3A3006433FB512BA6C269F729E5681FBF36DA1179DD",
            "type_tag": "macho",
            "last_analysis_stats": {
                "malicious": 0,
                "suspicious": 0,
                "undetected": 61,
                "harmless": 0,
                "timeout": 0,
                "confirmed-timeout": 0,
                "failure": 1,
                "type-unsupported": 12
            },
            "signature_info": {
                "Identifier": "pw_arm64",
                "TeamIdentifier": "not set",
                "Format": "Mach-O universal (x86_64 arm64)",
                "CDHash": "4242025e13a4b1123404e12c67df7b039d02bc4d",
                "Hash choices": "sha256",
                "CandidateCDHash sha256": "4242025e13a4b1123404e12c67df7b039d02bc4d",
                "CandidateCDHashFull sha256": "4242025e13a4b1123404e12c67df7b039d02bc4d0f6df347b34639ce2baf0898",
                "Info.plist": "not bound",
                "CMSDigest": "4242025e13a4b1123404e12c67df7b039d02bc4d0f6df347b34639ce2baf0898",
                "CMSDigestType": "2"
            },
            "crowdsourced_ids_results": [
                {
                    "rule_category": "Generic Protocol Command Decode",
                    "alert_severity": "low",
                    "rule_msg": "SURICATA STREAM CLOSEWAIT FIN out of window",
                    "rule_id": "1:2210016",
                    "alert_context": [
                        {
                            "dest_ip": "23.37.197.14",
                            "dest_port": 443
                        }
                    ]
                }
            ],
            "names": [
                "darwin-password-prompt"
            ],
            "first_submission_date": 1780913184,
            "unique_sources": 1,
            "last_analysis_results": {
                "Bkav": {
                    "method": "blacklist",
                    "engine_name": "Bkav",
                    "engine_version": "8.2.40(8338)",
                    "engine_update": "20260606",
                    "category": "undetected",
                    "result": null
                },
                "Lionic": {
                    "method": "blacklist",
                    "engine_name": "Lionic",
                    "engine_version": "8.16",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Elastic": {
                    "method": "blacklist",
                    "engine_name": "Elastic",
                    "engine_version": "4.0.264",
                    "engine_update": "20260603",
                    "category": "undetected",
                    "result": null
                },
                "Cynet": {
                    "method": "blacklist",
                    "engine_name": "Cynet",
                    "engine_version": "4.0.3.4",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "CTX": {
                    "method": "blacklist",
                    "engine_name": "CTX",
                    "engine_version": "2024.8.29.1",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "CAT-QuickHeal": {
                    "method": "blacklist",
                    "engine_name": "CAT-QuickHeal",
                    "engine_version": "22.00",
                    "engine_update": "20260607",
                    "category": "undetected",
                    "result": null
                },
                "Skyhigh": {
                    "method": "blacklist",
                    "engine_name": "Skyhigh",
                    "engine_version": "v2021.2.0+4045",
                    "engine_update": "20260607",
                    "category": "undetected",
                    "result": null
                },
                "ALYac": {
                    "method": "blacklist",
                    "engine_name": "ALYac",
                    "engine_version": "2.0.0.10",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Malwarebytes": {
                    "method": "blacklist",
                    "engine_name": "Malwarebytes",
                    "engine_version": "3.1.0.238",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "VIPRE": {
                    "method": "blacklist",
                    "engine_name": "VIPRE",
                    "engine_version": "6.0.0.35",
                    "engine_update": "20260607",
                    "category": "undetected",
                    "result": null
                },
                "Sangfor": {
                    "method": "blacklist",
                    "engine_name": "Sangfor",
                    "engine_version": "2.22.3.0",
                    "engine_update": "20260605",
                    "category": "undetected",
                    "result": null
                },
                "K7AntiVirus": {
                    "method": "blacklist",
                    "engine_name": "K7AntiVirus",
                    "engine_version": "14.55.59745",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "K7GW": {
                    "method": "blacklist",
                    "engine_name": "K7GW",
                    "engine_version": "14.55.59746",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Arcabit": {
                    "method": "blacklist",
                    "engine_name": "Arcabit",
                    "engine_version": "2025.0.0.23",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "huorong": {
                    "method": "blacklist",
                    "engine_name": "huorong",
                    "engine_version": "73e0c6e:73e0c6e:d28a123:d28a123",
                    "engine_update": "20260607",
                    "category": "undetected",
                    "result": null
                },
                "VirIT": {
                    "method": "blacklist",
                    "engine_name": "VirIT",
                    "engine_version": "9.5.1222",
                    "engine_update": "20260605",
                    "category": "undetected",
                    "result": null
                },
                "Symantec": {
                    "method": "blacklist",
                    "engine_name": "Symantec",
                    "engine_version": "1.22.0.0",
                    "engine_update": "20260607",
                    "category": "undetected",
                    "result": null
                },
                "ESET-NOD32": {
                    "method": "blacklist",
                    "engine_name": "ESET-NOD32",
                    "engine_version": "18.2.18.0",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "TrendMicro-HouseCall": {
                    "method": "blacklist",
                    "engine_name": "TrendMicro-HouseCall",
                    "engine_version": "24.550.0.1002",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Avast": {
                    "method": "blacklist",
                    "engine_name": "Avast",
                    "engine_version": "23.9.8494.0",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "ClamAV": {
                    "method": "blacklist",
                    "engine_name": "ClamAV",
                    "engine_version": "1.5.2.0",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Kaspersky": {
                    "method": "blacklist",
                    "engine_name": "Kaspersky",
                    "engine_version": "22.0.1.28",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "BitDefender": {
                    "method": "blacklist",
                    "engine_name": "BitDefender",
                    "engine_version": "7.2",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "NANO-Antivirus": {
                    "method": "blacklist",
                    "engine_name": "NANO-Antivirus",
                    "engine_version": "1.0.170.26895",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "SUPERAntiSpyware": {
                    "method": "blacklist",
                    "engine_name": "SUPERAntiSpyware",
                    "engine_version": "5.6.0.1032",
                    "engine_update": "20260605",
                    "category": "undetected",
                    "result": null
                },
                "MicroWorld-eScan": {
                    "method": "blacklist",
                    "engine_name": "MicroWorld-eScan",
                    "engine_version": "14.0.409.0",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Tencent": {
                    "method": "blacklist",
                    "engine_name": "Tencent",
                    "engine_version": "1.0.0.1",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Sophos": {
                    "method": "blacklist",
                    "engine_name": "Sophos",
                    "engine_version": "3.5.1.0",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "F-Secure": {
                    "method": "blacklist",
                    "engine_name": "F-Secure",
                    "engine_version": "18.10.1547.307",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "DrWeb": {
                    "method": "blacklist",
                    "engine_name": "DrWeb",
                    "engine_version": "7.0.75.2070",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Zillya": {
                    "method": "blacklist",
                    "engine_name": "Zillya",
                    "engine_version": "2.0.0.5616",
                    "engine_update": "20260605",
                    "category": "undetected",
                    "result": null
                },
                "TrendMicro": {
                    "method": "blacklist",
                    "engine_name": "TrendMicro",
                    "engine_version": "24.550.0.1002",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "McAfeeD": {
                    "method": "blacklist",
                    "engine_name": "McAfeeD",
                    "engine_version": "1.2.0.14833",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Emsisoft": {
                    "method": "blacklist",
                    "engine_name": "Emsisoft",
                    "engine_version": "2024.8.0.61147",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Ikarus": {
                    "method": "blacklist",
                    "engine_name": "Ikarus",
                    "engine_version": "6.5.4.0",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Jiangmin": {
                    "method": "blacklist",
                    "engine_name": "Jiangmin",
                    "engine_version": "16.0.100",
                    "engine_update": "20260607",
                    "category": "undetected",
                    "result": null
                },
                "Varist": {
                    "method": "blacklist",
                    "engine_name": "Varist",
                    "engine_version": "6.6.1.3",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Avira": {
                    "method": "blacklist",
                    "engine_name": "Avira",
                    "engine_version": "8.3.3.24",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Antiy-AVL": {
                    "method": "blacklist",
                    "engine_name": "Antiy-AVL",
                    "engine_version": "3.0",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Kingsoft": {
                    "method": "blacklist",
                    "engine_name": "Kingsoft",
                    "engine_version": "None",
                    "engine_update": "20260607",
                    "category": "undetected",
                    "result": null
                },
                "Gridinsoft": {
                    "method": "blacklist",
                    "engine_name": "Gridinsoft",
                    "engine_version": "1.0.247.174",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Xcitium": {
                    "method": "blacklist",
                    "engine_name": "Xcitium",
                    "engine_version": "38711",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Microsoft": {
                    "method": "blacklist",
                    "engine_name": "Microsoft",
                    "engine_version": "1.1.26040.8",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "ViRobot": {
                    "method": "blacklist",
                    "engine_name": "ViRobot",
                    "engine_version": "2014.3.20.0",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "ZoneAlarm": {
                    "method": "blacklist",
                    "engine_name": "ZoneAlarm",
                    "engine_version": "6.25-116107382",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "GData": {
                    "method": "blacklist",
                    "engine_name": "GData",
                    "engine_version": "GD:27.44833AVA:64.31380",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Google": {
                    "method": "blacklist",
                    "engine_name": "Google",
                    "engine_version": "1780905658",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "AhnLab-V3": {
                    "method": "blacklist",
                    "engine_name": "AhnLab-V3",
                    "engine_version": "3.30.0.10666",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Acronis": {
                    "method": "blacklist",
                    "engine_name": "Acronis",
                    "engine_version": "1.2.0.121",
                    "engine_update": "20240328",
                    "category": "undetected",
                    "result": null
                },
                "VBA32": {
                    "method": "blacklist",
                    "engine_name": "VBA32",
                    "engine_version": "5.6.1",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "TACHYON": {
                    "method": "blacklist",
                    "engine_name": "TACHYON",
                    "engine_version": "2026-06-08.02",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Zoner": {
                    "method": "blacklist",
                    "engine_name": "Zoner",
                    "engine_version": "2.2.2.0",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Rising": {
                    "method": "blacklist",
                    "engine_name": "Rising",
                    "engine_version": "25.0.0.28",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Yandex": {
                    "method": "blacklist",
                    "engine_name": "Yandex",
                    "engine_version": "5.5.2.24",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "TrellixENS": {
                    "method": "blacklist",
                    "engine_name": "TrellixENS",
                    "engine_version": "6.0.6.653",
                    "engine_update": "20260607",
                    "category": "undetected",
                    "result": null
                },
                "SentinelOne": {
                    "method": "blacklist",
                    "engine_name": "SentinelOne",
                    "engine_version": "7.6.2.19",
                    "engine_update": "20260324",
                    "category": "undetected",
                    "result": null
                },
                "MaxSecure": {
                    "method": "blacklist",
                    "engine_name": "MaxSecure",
                    "engine_version": "1.0.0.1",
                    "engine_update": "20260605",
                    "category": "undetected",
                    "result": null
                },
                "Fortinet": {
                    "method": "blacklist",
                    "engine_name": "Fortinet",
                    "engine_version": "7.0.48.0",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "AVG": {
                    "method": "blacklist",
                    "engine_name": "AVG",
                    "engine_version": "23.9.8494.0",
                    "engine_update": "20260608",
                    "category": "undetected",
                    "result": null
                },
                "Panda": {
                    "method": "blacklist",
                    "engine_name": "Panda",
                    "engine_version": "4.6.4.2",
                    "engine_update": "20260607",
                    "category": "undetected",
                    "result": null
                },
                "alibabacloud": {
                    "method": "blacklist",
                    "engine_name": "alibabacloud",
                    "engine_version": "2.2.0",
                    "engine_update": "20250321",
                    "category": "undetected",
                    "result": null
                },
                "CrowdStrike": {
                    "method": "blacklist",
                    "engine_name": "CrowdStrike",
                    "engine_version": "1.0",
                    "engine_update": "20230417",
                    "category": "failure",
                    "result": null
                },
                "Avast-Mobile": {
                    "method": "blacklist",
                    "engine_name": "Avast-Mobile",
                    "engine_version": "260608-00",
                    "engine_update": "20260608",
                    "category": "type-unsupported",
                    "result": null
                },
                "SymantecMobileInsight": {
                    "method": "blacklist",
                    "engine_name": "SymantecMobileInsight",
                    "engine_version": "2.0",
                    "engine_update": "20260123",
                    "category": "type-unsupported",
                    "result": null
                },
                "BitDefenderFalx": {
                    "method": "blacklist",
                    "engine_name": "BitDefenderFalx",
                    "engine_version": "2.0.936",
                    "engine_update": "20260525",
                    "category": "type-unsupported",
                    "result": null
                },
                "DeepInstinct": {
                    "method": "blacklist",
                    "engine_name": "DeepInstinct",
                    "engine_version": "5.0.0.8",
                    "engine_update": "20260608",
                    "category": "type-unsupported",
                    "result": null
                },
                "tehtris": {
                    "method": "blacklist",
                    "engine_name": "tehtris",
                    "engine_version": null,
                    "engine_update": "20260608",
                    "category": "type-unsupported",
                    "result": null
                },
                "APEX": {
                    "method": "blacklist",
                    "engine_name": "APEX",
                    "engine_version": "6.786",
                    "engine_update": "20260607",
                    "category": "type-unsupported",
                    "result": null
                },
                "Paloalto": {
                    "method": "blacklist",
                    "engine_name": "Paloalto",
                    "engine_version": "0.9.0.1003",
                    "engine_update": "20260608",
                    "category": "type-unsupported",
                    "result": null
                },
                "Trapmine": {
                    "method": "blacklist",
                    "engine_name": "Trapmine",
                    "engine_version": "4.0.12.0",
                    "engine_update": "20260604",
                    "category": "type-unsupported",
                    "result": null
                },
                "Alibaba": {
                    "method": "blacklist",
                    "engine_name": "Alibaba",
                    "engine_version": "0.3.0.5",
                    "engine_update": "20190527",
                    "category": "type-unsupported",
                    "result": null
                },
                "Webroot": {
                    "method": "blacklist",
                    "engine_name": "Webroot",
                    "engine_version": "1.9.0.8",
                    "engine_update": "20250227",
                    "category": "type-unsupported",
                    "result": null
                },
                "Cylance": {
                    "method": "blacklist",
                    "engine_name": "Cylance",
                    "engine_version": "3.0.0.0",
                    "engine_update": "20260521",
                    "category": "type-unsupported",
                    "result": null
                },
                "Trustlook": {
                    "method": "blacklist",
                    "engine_name": "Trustlook",
                    "engine_version": "1.0",
                    "engine_update": "20260608",
                    "category": "type-unsupported",
                    "result": null
                }
            },
            "symhash": "37e5c3ea41974fc9a921f6598caed876",
            "vhash": "4a7b9fe7dd9868f100f4f2fbc17d74c1",
            "filecondis": {
                "dhash": "f8f87c1c8d080000",
                "raw_md5": "d29b0685c61b5a12ebc15b0b916841d5"
            },
            "ssdeep": "1536:ke0ZuZKn5e/bjsLRL5kYuWtTrjjaKUqgfwUOka+GRsLCZNssRCumjd:kZu0e/b4tL+YuW3C2ZOeCumjd",
            "last_submission_date": 1780913184,
            "crowdsourced_ids_stats": {
                "high": 0,
                "medium": 0,
                "low": 1,
                "info": 0
            },
            "magic": "Mach-O universal binary with 2 architectures: [\\012- x86_64:\\012- Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|BINDS_TO_WEAK|PIE>] [\\012- arm64:\\012- Mach-O 64-bit arm64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|BINDS_TO_WEAK|PIE>]",
            "total_votes": {
                "harmless": 0,
                "malicious": 0
            },
            "type_description": "Mach-O",
            "meaningful_name": "pw_arm64",
            "type_tags": [
                "executable",
                "mac",
                "macho"
            ],
            "sha1": "d8849b95c64df7e807583e23fa0505cf870004d6",
            "times_submitted": 1,
            "md5": "09f9788e9cbdd3c1afba9adf01608b40",
            "sandbox_verdicts": {
                "Zenbox macOS": {
                    "category": "harmless",
                    "malware_classification": [
                        "CLEAN"
                    ],
                    "sandbox_name": "Zenbox macOS",
                    "confidence": 99
                }
            },
            "trid": [
                {
                    "file_type": "Mac OS X Mach-O universal Dynamically linked shared Library",
                    "probability": 82.2
                },
                {
                    "file_type": "Mac OS X Universal Binary (generic)",
                    "probability": 17.7
                }
            ],
            "size": 158232,
            "last_analysis_date": 1780913184,
            "last_modification_date": 1780913817,
            "macho_info": [
                {
                    "info": {
                        "sha256": "b8eedb0da8d79eb5b45e594487dcacb4a6ae79733cd32cd2a3a6615e0f5ba76f"
                    },
                    "commands": [
                        {
                            "type": "LC_DYLD_INFO_ONLY"
                        },
                        {
                            "type": "LC_SYMTAB"
                        },
                        {
                            "type": "LC_DYSYMTAB"
                        },
                        {
                            "type": "LC_LOAD_DYLINKER"
                        },
                        {
                            "type": "LC_UUID"
                        },
                        {
                            "type": "LC_BUILD_VERSION"
                        },
                        {
                            "type": "LC_SOURCE_VERSION"
                        },
                        {
                            "type": "LC_MAIN"
                        },
                        {
                            "type": "LC_LOAD_DYLIB"
                        },
                        {
                            "type": "LC_LOAD_WEAK_DYLIB"
                        },
                        {
                            "type": "LC_RPATH"
                        },
                        {
                            "type": "LC_FUNCTION_STARTS"
                        },
                        {
                            "type": "LC_DATA_IN_CODE"
                        }
                    ],
                    "segments": [
                        {
                            "name": "__PAGEZERO",
                            "fileoff": "0x0",
                            "vmsize": "0x100000000",
                            "filesize": "0x0",
                            "vmaddr": "0x0"
                        },
                        {
                            "name": "__TEXT",
                            "fileoff": "0x0",
                            "vmsize": "0x7000",
                            "filesize": "0x7000",
                            "vmaddr": "0x100000000",
                            "sections": [
                                {
                                    "type": "S_REGULAR",
                                    "flags": [
                                        "SECTION_ATTRIBUTES_USR",
                                        "SECTION_ATTRIBUTES_SYS"
                                    ],
                                    "name": "__text"
                                },
                                {
                                    "type": "S_SYMBOL_STUBS",
                                    "flags": [
                                        "SECTION_ATTRIBUTES_USR",
                                        "SECTION_ATTRIBUTES_SYS"
                                    ],
                                    "name": "__stubs"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "flags": [
                                        "SECTION_ATTRIBUTES_USR",
                                        "SECTION_ATTRIBUTES_SYS"
                                    ],
                                    "name": "__stub_helper"
                                },
                                {
                                    "type": "S_CSTRING_LITERALS",
                                    "name": "__cstring"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__const"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__swift5_entry"
                                },
                                {
                                    "type": "S_CSTRING_LITERALS",
                                    "name": "__objc_methname"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__swift5_typeref"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__unwind_info"
                                },
                                {
                                    "type": "S_ZEROFILL",
                                    "flags": [
                                        "S_CSTRING_LITERALS",
                                        "S_SYMBOL_STUBS",
                                        "SECTION_ATTRIBUTES_USR"
                                    ],
                                    "name": "__eh_frame"
                                }
                            ]
                        },
                        {
                            "name": "__DATA_CONST",
                            "fileoff": "0x7000",
                            "vmsize": "0x1000",
                            "filesize": "0x1000",
                            "vmaddr": "0x100007000",
                            "sections": [
                                {
                                    "type": "S_CSTRING_LITERALS",
                                    "flags": [
                                        "S_8BYTE_LITERALS"
                                    ],
                                    "name": "__got"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__const"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__objc_imageinfo"
                                }
                            ]
                        },
                        {
                            "name": "__DATA",
                            "fileoff": "0x8000",
                            "vmsize": "0x1000",
                            "filesize": "0x1000",
                            "vmaddr": "0x100008000",
                            "sections": [
                                {
                                    "type": "S_ZEROFILL",
                                    "flags": [
                                        "S_CSTRING_LITERALS",
                                        "S_8BYTE_LITERALS"
                                    ],
                                    "name": "__la_symbol_ptr"
                                },
                                {
                                    "type": "S_ZEROFILL",
                                    "flags": [
                                        "S_8BYTE_LITERALS",
                                        "SECTION_ATTRIBUTES_USR"
                                    ],
                                    "name": "__objc_selrefs"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "flags": [
                                        "SECTION_ATTRIBUTES_USR"
                                    ],
                                    "name": "__objc_classrefs"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__data"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__s_async_hook"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__swift56_hooks"
                                },
                                {
                                    "type": "S_ZEROFILL",
                                    "name": "__bss"
                                },
                                {
                                    "type": "S_ZEROFILL",
                                    "name": "__common"
                                }
                            ]
                        },
                        {
                            "name": "__LINKEDIT",
                            "fileoff": "0x9000",
                            "vmsize": "0x6000",
                            "filesize": "0x5ed0",
                            "vmaddr": "0x100009000"
                        }
                    ],
                    "headers": {
                        "cpu_subtype": "X86_64_ALL",
                        "magic": "0xfeedfacf",
                        "size_cmds": 3768,
                        "num_cmds": 37,
                        "file_type": "executable file",
                        "cpu_subtype_lib64": false,
                        "flags": [
                            "BINDS_TO_WEAK",
                            "DYLDLINK",
                            "NOUNDEFS",
                            "PIE",
                            "TWOLEVEL"
                        ],
                        "cpu_type": "x86_64",
                        "reserved": "0x0",
                        "entrypoint": "0x3080"
                    },
                    "platform": 1,
                    "libs": [
                        "/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit",
                        "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation",
                        "/usr/lib/libSystem.B.dylib",
                        "/usr/lib/libc++.1.dylib",
                        "/usr/lib/libobjc.A.dylib",
                        "/usr/lib/swift/libswiftCore.dylib",
                        "/usr/lib/swift/libswiftFoundation.dylib"
                    ]
                },
                {
                    "info": {
                        "sha256": "e55471a0100fda50eaa97f97f7b560772ea58f6bcc95106b4c3e3e02d910e21a"
                    },
                    "commands": [
                        {
                            "type": "LC_DYLD_INFO_ONLY"
                        },
                        {
                            "type": "LC_SYMTAB"
                        },
                        {
                            "type": "LC_DYSYMTAB"
                        },
                        {
                            "type": "LC_LOAD_DYLINKER"
                        },
                        {
                            "type": "LC_UUID"
                        },
                        {
                            "type": "LC_BUILD_VERSION"
                        },
                        {
                            "type": "LC_SOURCE_VERSION"
                        },
                        {
                            "type": "LC_MAIN"
                        },
                        {
                            "type": "LC_LOAD_DYLIB"
                        },
                        {
                            "type": "LC_LOAD_WEAK_DYLIB"
                        },
                        {
                            "type": "LC_RPATH"
                        },
                        {
                            "type": "LC_FUNCTION_STARTS"
                        },
                        {
                            "type": "LC_DATA_IN_CODE"
                        },
                        {
                            "type": "LC_CODE_SIGNATURE"
                        }
                    ],
                    "segments": [
                        {
                            "name": "__PAGEZERO",
                            "fileoff": "0x0",
                            "vmsize": "0x100000000",
                            "filesize": "0x0",
                            "vmaddr": "0x0"
                        },
                        {
                            "name": "__TEXT",
                            "fileoff": "0x0",
                            "vmsize": "0x8000",
                            "filesize": "0x8000",
                            "vmaddr": "0x100000000",
                            "sections": [
                                {
                                    "type": "S_REGULAR",
                                    "flags": [
                                        "SECTION_ATTRIBUTES_USR",
                                        "SECTION_ATTRIBUTES_SYS"
                                    ],
                                    "name": "__text"
                                },
                                {
                                    "type": "S_SYMBOL_STUBS",
                                    "flags": [
                                        "SECTION_ATTRIBUTES_USR",
                                        "SECTION_ATTRIBUTES_SYS"
                                    ],
                                    "name": "__stubs"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "flags": [
                                        "SECTION_ATTRIBUTES_USR",
                                        "SECTION_ATTRIBUTES_SYS"
                                    ],
                                    "name": "__stub_helper"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "flags": [
                                        "SECTION_ATTRIBUTES_USR",
                                        "SECTION_ATTRIBUTES_SYS"
                                    ],
                                    "name": "__objc_stubs"
                                },
                                {
                                    "type": "S_CSTRING_LITERALS",
                                    "name": "__cstring"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__const"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__swift5_entry"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__swift5_typeref"
                                },
                                {
                                    "type": "S_CSTRING_LITERALS",
                                    "name": "__objc_methname"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__unwind_info"
                                },
                                {
                                    "type": "S_ZEROFILL",
                                    "flags": [
                                        "S_CSTRING_LITERALS",
                                        "S_SYMBOL_STUBS",
                                        "SECTION_ATTRIBUTES_USR"
                                    ],
                                    "name": "__eh_frame"
                                }
                            ]
                        },
                        {
                            "name": "__DATA_CONST",
                            "fileoff": "0x8000",
                            "vmsize": "0x4000",
                            "filesize": "0x4000",
                            "vmaddr": "0x100008000",
                            "sections": [
                                {
                                    "type": "S_CSTRING_LITERALS",
                                    "flags": [
                                        "S_8BYTE_LITERALS"
                                    ],
                                    "name": "__got"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__const"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__objc_imageinfo"
                                }
                            ]
                        },
                        {
                            "name": "__DATA",
                            "fileoff": "0xc000",
                            "vmsize": "0x4000",
                            "filesize": "0x4000",
                            "vmaddr": "0x10000c000",
                            "sections": [
                                {
                                    "type": "S_ZEROFILL",
                                    "flags": [
                                        "S_CSTRING_LITERALS",
                                        "S_8BYTE_LITERALS"
                                    ],
                                    "name": "__la_symbol_ptr"
                                },
                                {
                                    "type": "S_ZEROFILL",
                                    "flags": [
                                        "S_8BYTE_LITERALS",
                                        "SECTION_ATTRIBUTES_USR"
                                    ],
                                    "name": "__objc_selrefs"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "flags": [
                                        "SECTION_ATTRIBUTES_USR"
                                    ],
                                    "name": "__objc_classrefs"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__data"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__s_async_hook"
                                },
                                {
                                    "type": "S_REGULAR",
                                    "name": "__swift56_hooks"
                                },
                                {
                                    "type": "S_ZEROFILL",
                                    "name": "__bss"
                                },
                                {
                                    "type": "S_ZEROFILL",
                                    "name": "__common"
                                }
                            ]
                        },
                        {
                            "name": "__LINKEDIT",
                            "fileoff": "0x10000",
                            "vmsize": "0x8000",
                            "filesize": "0x6a18",
                            "vmaddr": "0x100010000"
                        }
                    ],
                    "headers": {
                        "cpu_subtype": "ARM64_ALL",
                        "magic": "0xfeedfacf",
                        "size_cmds": 3864,
                        "num_cmds": 38,
                        "file_type": "executable file",
                        "cpu_subtype_lib64": false,
                        "flags": [
                            "BINDS_TO_WEAK",
                            "DYLDLINK",
                            "NOUNDEFS",
                            "PIE",
                            "TWOLEVEL"
                        ],
                        "cpu_type": "ARM64",
                        "reserved": "0x0",
                        "entrypoint": "0x2fc8"
                    },
                    "platform": 1,
                    "libs": [
                        "/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit",
                        "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation",
                        "/usr/lib/libSystem.B.dylib",
                        "/usr/lib/libc++.1.dylib",
                        "/usr/lib/libobjc.A.dylib",
                        "/usr/lib/swift/libswiftCore.dylib",
                        "/usr/lib/swift/libswiftFoundation.dylib"
                    ]
                }
            ],
            "tags": [
                "arm",
                "macho",
                "multi-arch",
                "64bits",
                "self-signed"
            ]
        }
    }
}
            

Related Reports

« Back
⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.