{
"CFBundleExecutable": "wdavdaemon",
"CFBundleIconFile": "AppIcon",
"CFBundleIdentifier": "com.microsoft.wdav",
"CFBundleInfoDictionaryVersion": "6.0",
"CFBundleName": "Microsoft Defender",
"CFBundlePackageType": "APPL",
"CFBundleShortVersionString": "101.26022.0020",
"CFBundleSupportedPlatforms": [
"MacOSX"
],
"CFBundleVersion": "101.26022.0020",
"NSHumanReadableCopyright": "Copyright © Microsoft Corporation 2026. All rights reserved.",
"LSUIElement": true,
"CSFlags": 65536,
"LSRequiresNativeExecution": true
}{
"fileSize": 0.2060699462890625,
"architectures": [
{
"bits": "32-bit",
"fileType": "Fixed Virtual Memory Shared Library File",
"header": {
"magic": 3405691582,
"cputype": 0,
"cpusubtype": 16,
"filetype": 3,
"ncmds": 1024,
"sizeofcmds": 84880,
"flags": [
"The object file is the output of an incremental link against a base file and can not be link edited again.",
"The object file is the input for the dynamic linker and can not be staticly link edited again.",
"The object file's undefined references are bound by the dynamic linker when loaded."
]
},
"loadCommandsInfo": [
{
"description": 3405691582,
"size": 2,
"offset": " 0x0"
},
{
"description": 4103,
"size": 3,
"offset": " 0x8"
},
{
"description": 1024,
"size": 84880,
"offset": " 0x10"
},
{
"description": "Dynamic Linker Load Command",
"size": 4108,
"offset": " 0x18"
},
{
"description": 0,
"size": 7168,
"offset": " 0x20"
},
{
"description": 101392,
"size": 14,
"offset": " 0x28"
}
],
"magic": "cafebabe",
"offset": "0",
"processorSubType": "v7em",
"processorType": 0
},
{
"bits": "64-bit",
"fileType": "Demand Paged Executable File",
"header": {
"magic": 3489328638,
"cputype": 7,
"cpusubtype": 3,
"filetype": 2,
"ncmds": 56,
"sizeofcmds": 3576,
"flags": [
"The object file has no undefined references and is executable.",
"The object file is the input for the dynamic linker and can not be staticly link edited again.",
"undefined"
],
"reserved": 0
},
"loadCommandsInfo": [
{
"description": 4277009103,
"size": 3,
"offset": " 0x4000"
},
{
"description": "Symbol segment command",
"size": 56,
"offset": " 0x4008"
},
{
"description": 56,
"size": 131205,
"offset": " 0x4010"
},
{
"description": 131205,
"size": 25,
"offset": " 0x4018"
},
{
"description": "64-bits Segment Load Command",
"size": 1095786335,
"offset": " 0x4020"
},
{
"description": 1095786335,
"size": 20306,
"offset": " 0x4028"
},
{
"description": 0,
"size": 25,
"offset": " 0x4060"
},
{
"description": "64-bits Segment Load Command",
"size": 1163157343,
"offset": " 0x4068"
},
{
"description": 0,
"size": 2816,
"offset": " 0x4080"
},
{
"description": 0,
"size": 2816,
"offset": " 0x4090"
},
{
"description": 2816,
"size": 5,
"offset": " 0x4098"
},
{
"description": "UNIX Thread command",
"size": 3,
"offset": " 0x40a0"
},
{
"description": "Symbol segment command",
"size": 1702125407,
"offset": " 0x40a8"
},
{
"description": 0,
"size": 1163157343,
"offset": " 0x40b8"
},
{
"description": 0,
"size": 43760,
"offset": " 0x40c8"
},
{
"description": 43760,
"size": 10,
"offset": " 0x40d0"
},
{
"description": "Prepage command",
"size": 43760,
"offset": " 0x40d8"
}
],
"magic": "cffaedfe",
"offset": "4000",
"processorSubType": 3,
"processorType": "X86"
},
{
"bits": "64-bit",
"fileType": "Demand Paged Executable File",
"header": {
"magic": 3489328638,
"cputype": 12,
"cpusubtype": 0,
"filetype": 2,
"ncmds": 56,
"sizeofcmds": 3576,
"flags": [
"The object file has no undefined references and is executable.",
"The object file is the input for the dynamic linker and can not be staticly link edited again.",
"undefined"
],
"reserved": 0
},
"loadCommandsInfo": [
{
"description": 0,
"size": 56,
"offset": " 0x1c008"
},
{
"description": 56,
"size": 131205,
"offset": " 0x1c010"
},
{
"description": 131205,
"size": 25,
"offset": " 0x1c018"
},
{
"description": "64-bits Segment Load Command",
"size": 1095786335,
"offset": " 0x1c020"
},
{
"description": 1095786335,
"size": 20306,
"offset": " 0x1c028"
},
{
"description": 0,
"size": 25,
"offset": " 0x1c060"
},
{
"description": "64-bits Segment Load Command",
"size": 1163157343,
"offset": " 0x1c068"
},
{
"description": 0,
"size": 3072,
"offset": " 0x1c080"
},
{
"description": 0,
"size": 3072,
"offset": " 0x1c090"
},
{
"description": 3072,
"size": 5,
"offset": " 0x1c098"
},
{
"description": "UNIX Thread command",
"size": 3,
"offset": " 0x1c0a0"
},
{
"description": "Symbol segment command",
"size": 1702125407,
"offset": " 0x1c0a8"
},
{
"description": 0,
"size": 1163157343,
"offset": " 0x1c0b8"
},
{
"description": 0,
"size": 43736,
"offset": " 0x1c0c8"
},
{
"description": 43736,
"size": 4,
"offset": " 0x1c0d0"
},
{
"description": "Thread command",
"size": 43736,
"offset": " 0x1c0d8"
}
],
"magic": "cffaedfe",
"offset": "1c000",
"processorSubType": "all",
"processorType": "ARM"
}
]
}{
"CFBundleExecutable": "wdavdaemon",
"CFBundleIconFile": "AppIcon",
"CFBundleIdentifier": "com.microsoft.wdav",
"CFBundleInfoDictionaryVersion": "6.0",
"CFBundleName": "Microsoft Defender ATP",
"CFBundlePackageType": "APPL",
"CFBundleShortVersionString": "101.47.27",
"CFBundleSupportedPlatforms": [
"MacOSX"
],
"CFBundleVersion": "101.47.27",
"NSHumanReadableCopyright": "Copyright © Microsoft Corporation 2021. All rights reserved.",
"LSUIElement": true,
"CSFlags": 65536
}{
"fileSize": 0.2366943359375,
"architectures": [
{
"bits": "32-bit",
"fileType": "Fixed Virtual Memory Shared Library File",
"header": {
"magic": 3405691582,
"cputype": 0,
"cpusubtype": 16,
"filetype": 3,
"ncmds": 1024,
"sizeofcmds": 6288,
"flags": [
"The object file is the output of an incremental link against a base file and can not be link edited again.",
"The object file is the input for the dynamic linker and can not be staticly link edited again.",
"The object file's undefined references are bound by the dynamic linker when loaded."
]
},
"loadCommandsInfo": [
{
"description": 3405691582,
"size": 2,
"offset": " 0x0"
},
{
"description": 4103,
"size": 3,
"offset": " 0x8"
},
{
"description": 1024,
"size": 6288,
"offset": " 0x10"
},
{
"description": "Dynamic Linker Load Command",
"size": 4108,
"offset": " 0x18"
},
{
"description": 0,
"size": 512,
"offset": " 0x20"
},
{
"description": 117120,
"size": 14,
"offset": " 0x28"
}
],
"magic": "cafebabe",
"offset": "0",
"processorSubType": "v7em",
"processorType": 0
},
{
"bits": "64-bit",
"fileType": "Demand Paged Executable File",
"header": {
"magic": 3489328638,
"cputype": 7,
"cpusubtype": 3,
"filetype": 2,
"ncmds": 47,
"sizeofcmds": 3320,
"flags": [
"The object file has no undefined references and is executable.",
"The object file is the input for the dynamic linker and can not be staticly link edited again.",
"undefined"
],
"reserved": 0
},
"loadCommandsInfo": [
{
"description": 4277009103,
"size": 3,
"offset": " 0x4000"
},
{
"description": "Symbol segment command",
"size": 47,
"offset": " 0x4008"
},
{
"description": "Minimum Version Requirement Command for tvOS",
"size": 131205,
"offset": " 0x4010"
},
{
"description": 131205,
"size": 25,
"offset": " 0x4018"
},
{
"description": "64-bits Segment Load Command",
"size": 1095786335,
"offset": " 0x4020"
},
{
"description": 1095786335,
"size": 20306,
"offset": " 0x4028"
},
{
"description": 0,
"size": 25,
"offset": " 0x4060"
},
{
"description": "64-bits Segment Load Command",
"size": 1163157343,
"offset": " 0x4068"
},
{
"description": 0,
"size": 3072,
"offset": " 0x4080"
},
{
"description": 0,
"size": 3072,
"offset": " 0x4090"
},
{
"description": 3072,
"size": 5,
"offset": " 0x4098"
},
{
"description": "UNIX Thread command",
"size": 4,
"offset": " 0x40a0"
},
{
"description": "Thread command",
"size": 1702125407,
"offset": " 0x40a8"
},
{
"description": 0,
"size": 1163157343,
"offset": " 0x40b8"
}
],
"magic": "cffaedfe",
"offset": "4000",
"processorSubType": 3,
"processorType": "X86"
},
{
"bits": "64-bit",
"fileType": "Demand Paged Executable File",
"header": {
"magic": 3489328638,
"cputype": 12,
"cpusubtype": 0,
"filetype": 2,
"ncmds": 48,
"sizeofcmds": 3392,
"flags": [
"The object file has no undefined references and is executable.",
"The object file is the input for the dynamic linker and can not be staticly link edited again.",
"undefined"
],
"reserved": 0
},
"loadCommandsInfo": [
{
"description": 0,
"size": 48,
"offset": " 0x20008"
},
{
"description": "Minimum Version Requirement Command for watchOS",
"size": 131205,
"offset": " 0x20010"
},
{
"description": 131205,
"size": 25,
"offset": " 0x20018"
},
{
"description": "64-bits Segment Load Command",
"size": 1095786335,
"offset": " 0x20020"
},
{
"description": 1095786335,
"size": 20306,
"offset": " 0x20028"
},
{
"description": 0,
"size": 25,
"offset": " 0x20060"
},
{
"description": "64-bits Segment Load Command",
"size": 1163157343,
"offset": " 0x20068"
},
{
"description": 0,
"size": 3072,
"offset": " 0x20080"
},
{
"description": 0,
"size": 3072,
"offset": " 0x20090"
},
{
"description": 3072,
"size": 5,
"offset": " 0x20098"
},
{
"description": "UNIX Thread command",
"size": 4,
"offset": " 0x200a0"
},
{
"description": "Thread command",
"size": 1702125407,
"offset": " 0x200a8"
},
{
"description": 0,
"size": 1163157343,
"offset": " 0x200b8"
}
],
"magic": "cffaedfe",
"offset": "20000",
"processorSubType": "all",
"processorType": "ARM"
}
]
}