{ "BuildMachineOSBuild": "19H1323", "CFBundleDevelopmentRegion": "en", "CFBundleDocumentTypes": [ { "CFBundleTypeExtensions": [ "pkg", "mpkg" ], "CFBundleTypeIconFile": "PackageIcon", "CFBundleTypeName": "com.mothersruin.apple-installer-package", "CFBundleTypeOSTypes": [ "pkg1", "mpkg" ], "CFBundleTypeRole": "Viewer", "LSHandlerRank": "Default", "NSDocumentClass": "SuspiciousPackageDocument" }, { "CFBundleTypeExtensions": [ "bom" ], "CFBundleTypeName": "com.mothersruin.apple-installer-receipt", "CFBundleTypeOSTypes": [ "????" ], "CFBundleTypeRole": "Viewer", "NSDocumentClass": "SuspiciousPackageDocument" }, { "CFBundleTypeExtensions": [ "export-item" ], "CFBundleTypeIconFile": "ExportDocIcon", "CFBundleTypeIconSystemGenerated": 1, "CFBundleTypeName": "com.mothersruin.suspicious-package-export", "CFBundleTypeRole": "Viewer", "LSHandlerRank": "Default", "LSTypeIsPackage": true, "NSDocumentClass": "SuspiciousPackageDocument" } ], "CFBundleExecutable": "Suspicious Package", "CFBundleIconFile": "AppIcon", "CFBundleIconName": "AppIcon", "CFBundleIdentifier": "com.mothersruin.SuspiciousPackageApp", "CFBundleInfoDictionaryVersion": "6.0", "CFBundleName": "Suspicious Package", "CFBundlePackageType": "APPL", "CFBundleShortVersionString": "4.0", "CFBundleSignature": "????", "CFBundleSupportedPlatforms": [ "MacOSX" ], "CFBundleURLTypes": [ { "CFBundleTypeRole": "Viewer", "CFBundleURLName": "com.mothersruin.SuspiciousPackage.AppleInstallerPackage", "CFBundleURLSchemes": [ "x-apple-installer-package" ] } ], "CFBundleVersion": "826", "DTCompiler": "com.apple.compilers.llvm.clang.1_0", "DTPlatformBuild": "12D4e", "DTPlatformName": "macosx", "DTPlatformVersion": "11.1", "DTSDKBuild": "20C63", "DTSDKName": "macosx11.1", "DTXcode": "1240", "DTXcodeBuild": "12D4e", "LSMinimumSystemVersion": "10.14", "MRSAssetCatalogDeploymentTarget": "10.14", "MRSUpdateCheckerDownloadPageURL": "https://www.mothersruin.com/software/SuspiciousPackage/update.html", "NSAppleScriptEnabled": true, "NSDesktopFolderUsageDescription": "NSDesktopFolderUsageDescription", "NSDocumentsFolderUsageDescription": "NSDocumentsFolderUsageDescription", "NSDownloadsFolderUsageDescription": "NSDownloadsFolderUsageDescription", "NSHumanReadableCopyright": "Copyright ยฉ 2008โ2021, Randy Saldinger, dba Mothers Ruin Software. All rights reserved.", "NSMainNibFile": "MainMenu", "NSPrincipalClass": "NSApplication", "NSSupportsAutomaticTermination": true, "NSSupportsSuddenTermination": true, "OSAScriptingDefinition": "SuspiciousPackage.sdef", "UTExportedTypeDeclarations": [ { "UTTypeConformsTo": [ "com.apple.package" ], "UTTypeDescription": "Suspicious Package Item Export", "UTTypeIconFile": "ExportDocIcon", "UTTypeIcons": { "UTTypeIconText": "export" }, "UTTypeIdentifier": "com.mothersruin.suspicious-package-export", "UTTypeTagSpecification": { "public.filename-extension": [ "export-item" ] } } ] }
{ "fileSize": 1.4967193603515625, "architectures": [ { "bits": "32-bit", "fileType": "Fixed Virtual Memory Shared Library File", "header": { "magic": 3405691582, "cputype": 0, "cpusubtype": 16, "filetype": 3, "ncmds": 1024, "sizeofcmds": 783552, "flags": [ "The object file is the output of an incremental link against a base file and can not be link edited again.", "The object file is the input for the dynamic linker and can not be staticly link edited again.", "The object file's undefined references are bound by the dynamic linker when loaded." ] }, "loadCommandsInfo": [ { "description": 3405691582, "size": 2, "offset": " 0x0" }, { "description": 4103, "size": 3, "offset": " 0x8" }, { "description": 1024, "size": 783552, "offset": " 0x10" }, { "description": "Dynamic Linker Load Command", "size": 4108, "offset": " 0x18" }, { "description": 0, "size": 50176, "offset": " 0x20" }, { "description": 766608, "size": 14, "offset": " 0x28" } ], "magic": "cafebabe", "offset": "0", "processorSubType": "v7em", "processorType": 0 }, { "bits": "64-bit", "fileType": "Demand Paged Executable File", "header": { "magic": 3489328638, "cputype": 7, "cpusubtype": 3, "filetype": 2, "ncmds": 31, "sizeofcmds": 4400, "flags": [ "The object file has no undefined references and is executable.", "The object file is the input for the dynamic linker and can not be staticly link edited again.", "undefined" ], "reserved": 0 }, "loadCommandsInfo": [ { "description": 4277009103, "size": 3, "offset": " 0x4000" }, { "description": "Symbol segment command", "size": 31, "offset": " 0x4008" }, { "description": 31, "size": 131205, "offset": " 0x4010" }, { "description": 131205, "size": 25, "offset": " 0x4018" }, { "description": "64-bits Segment Load Command", "size": 1095786335, "offset": " 0x4020" }, { "description": 1095786335, "size": 20306, "offset": " 0x4028" }, { "description": 0, "size": 25, "offset": " 0x4060" }, { "description": "64-bits Segment Load Command", "size": 1163157343, "offset": " 0x4068" } ], "magic": "cffaedfe", "offset": "4000", "processorSubType": 3, "processorType": "X86" }, { "bits": "64-bit", "fileType": "Demand Paged Executable File", "header": { "magic": 3489328638, "cputype": 12, "cpusubtype": 0, "filetype": 2, "ncmds": 32, "sizeofcmds": 4472, "flags": [ "The object file has no undefined references and is executable.", "The object file is the input for the dynamic linker and can not be staticly link edited again.", "undefined" ], "reserved": 0 }, "loadCommandsInfo": [ { "description": 0, "size": 32, "offset": " 0xc4008" }, { "description": "Lazy Dynamic Library Load Command", "size": 131205, "offset": " 0xc4010" }, { "description": 131205, "size": 25, "offset": " 0xc4018" }, { "description": "64-bits Segment Load Command", "size": 1095786335, "offset": " 0xc4020" }, { "description": 1095786335, "size": 20306, "offset": " 0xc4028" }, { "description": 0, "size": 25, "offset": " 0xc4060" }, { "description": "64-bits Segment Load Command", "size": 1163157343, "offset": " 0xc4068" } ], "magic": "cffaedfe", "offset": "c4000", "processorSubType": "all", "processorType": "ARM" } ] }
{ "BuildMachineOSBuild": "19H524", "CFBundleDevelopmentRegion": "en", "CFBundleDocumentTypes": [ { "CFBundleTypeExtensions": [ "pkg", "mpkg" ], "CFBundleTypeIconFile": "PackageIcon", "CFBundleTypeName": "com.mothersruin.apple-installer-package", "CFBundleTypeOSTypes": [ "pkg1", "mpkg" ], "CFBundleTypeRole": "Viewer", "LSHandlerRank": "Default", "NSDocumentClass": "SuspiciousPackageDocument" }, { "CFBundleTypeExtensions": [ "bom" ], "CFBundleTypeName": "com.mothersruin.apple-installer-receipt", "CFBundleTypeOSTypes": [ "????" ], "CFBundleTypeRole": "Viewer", "NSDocumentClass": "SuspiciousPackageDocument" }, { "CFBundleTypeExtensions": [ "export-item" ], "CFBundleTypeIconFile": "ExportDocIcon", "CFBundleTypeIconSystemGenerated": 1, "CFBundleTypeName": "com.mothersruin.suspicious-package-export", "CFBundleTypeRole": "Viewer", "LSHandlerRank": "Default", "LSTypeIsPackage": true, "NSDocumentClass": "SuspiciousPackageDocument" } ], "CFBundleExecutable": "Suspicious Package", "CFBundleIconFile": "AppIcon", "CFBundleIconName": "AppIcon", "CFBundleIdentifier": "com.mothersruin.SuspiciousPackageApp", "CFBundleInfoDictionaryVersion": "6.0", "CFBundleName": "Suspicious Package", "CFBundlePackageType": "APPL", "CFBundleShortVersionString": "3.7", "CFBundleSignature": "????", "CFBundleSupportedPlatforms": [ "MacOSX" ], "CFBundleURLTypes": [ { "CFBundleTypeRole": "Viewer", "CFBundleURLName": "com.mothersruin.SuspiciousPackage.AppleInstallerPackage", "CFBundleURLSchemes": [ "x-apple-installer-package" ] } ], "CFBundleVersion": "773", "DTCompiler": "com.apple.compilers.llvm.clang.1_0", "DTPlatformBuild": "12D4e", "DTPlatformName": "macosx", "DTPlatformVersion": "11.1", "DTSDKBuild": "20C63", "DTSDKName": "macosx11.1", "DTXcode": "1240", "DTXcodeBuild": "12D4e", "LSMinimumSystemVersion": "10.14", "MRSAssetCatalogDeploymentTarget": "10.14", "MRSUpdateCheckerDownloadPageURL": "https://www.mothersruin.com/software/SuspiciousPackage/update.html", "NSAppleScriptEnabled": true, "NSDesktopFolderUsageDescription": "NSDesktopFolderUsageDescription", "NSDocumentsFolderUsageDescription": "NSDocumentsFolderUsageDescription", "NSDownloadsFolderUsageDescription": "NSDownloadsFolderUsageDescription", "NSHumanReadableCopyright": "Copyright ยฉ 2008โ2021, Randy Saldinger, dba Mothers Ruin Software. All rights reserved.", "NSMainNibFile": "MainMenu", "NSPrincipalClass": "NSApplication", "NSSupportsAutomaticTermination": true, "NSSupportsSuddenTermination": true, "OSAScriptingDefinition": "SuspiciousPackage.sdef", "UTExportedTypeDeclarations": [ { "UTTypeConformsTo": [ "com.apple.package" ], "UTTypeDescription": "Suspicious Package Item Export", "UTTypeIconFile": "ExportDocIcon", "UTTypeIcons": { "UTTypeIconText": "export" }, "UTTypeIdentifier": "com.mothersruin.suspicious-package-export", "UTTypeTagSpecification": { "public.filename-extension": [ "export-item" ] } } ] }
{ "fileSize": 1.496246337890625, "architectures": [ { "bits": "32-bit", "fileType": "Fixed Virtual Memory Shared Library File", "header": { "magic": 3405691582, "cputype": 0, "cpusubtype": 16, "filetype": 3, "ncmds": 1024, "sizeofcmds": 783024, "flags": [ "The object file is the output of an incremental link against a base file and can not be link edited again.", "The object file is the input for the dynamic linker and can not be staticly link edited again.", "The object file's undefined references are bound by the dynamic linker when loaded." ] }, "loadCommandsInfo": [ { "description": 3405691582, "size": 2, "offset": " 0x0" }, { "description": 4103, "size": 3, "offset": " 0x8" }, { "description": 1024, "size": 783024, "offset": " 0x10" }, { "description": "Dynamic Linker Load Command", "size": 4108, "offset": " 0x18" }, { "description": 0, "size": 50176, "offset": " 0x20" }, { "description": 766112, "size": 14, "offset": " 0x28" } ], "magic": "cafebabe", "offset": "0", "processorSubType": "v7em", "processorType": 0 }, { "bits": "64-bit", "fileType": "Demand Paged Executable File", "header": { "magic": 3489328638, "cputype": 7, "cpusubtype": 3, "filetype": 2, "ncmds": 31, "sizeofcmds": 4400, "flags": [ "The object file has no undefined references and is executable.", "The object file is the input for the dynamic linker and can not be staticly link edited again.", "undefined" ], "reserved": 0 }, "loadCommandsInfo": [ { "description": 4277009103, "size": 3, "offset": " 0x4000" }, { "description": "Symbol segment command", "size": 31, "offset": " 0x4008" }, { "description": 31, "size": 131205, "offset": " 0x4010" }, { "description": 131205, "size": 25, "offset": " 0x4018" }, { "description": "64-bits Segment Load Command", "size": 1095786335, "offset": " 0x4020" }, { "description": 1095786335, "size": 20306, "offset": " 0x4028" }, { "description": 0, "size": 25, "offset": " 0x4060" }, { "description": "64-bits Segment Load Command", "size": 1163157343, "offset": " 0x4068" } ], "magic": "cffaedfe", "offset": "4000", "processorSubType": 3, "processorType": "X86" }, { "bits": "64-bit", "fileType": "Demand Paged Executable File", "header": { "magic": 3489328638, "cputype": 12, "cpusubtype": 0, "filetype": 2, "ncmds": 32, "sizeofcmds": 4472, "flags": [ "The object file has no undefined references and is executable.", "The object file is the input for the dynamic linker and can not be staticly link edited again.", "undefined" ], "reserved": 0 }, "loadCommandsInfo": [ { "description": 0, "size": 32, "offset": " 0xc4008" }, { "description": "Lazy Dynamic Library Load Command", "size": 131205, "offset": " 0xc4010" }, { "description": 131205, "size": 25, "offset": " 0xc4018" }, { "description": "64-bits Segment Load Command", "size": 1095786335, "offset": " 0xc4020" }, { "description": 1095786335, "size": 20306, "offset": " 0xc4028" }, { "description": 0, "size": 25, "offset": " 0xc4060" }, { "description": "64-bits Segment Load Command", "size": 1163157343, "offset": " 0xc4068" } ], "magic": "cffaedfe", "offset": "c4000", "processorSubType": "all", "processorType": "ARM" } ] }
{ "BuildMachineOSBuild": "19G2021", "CFBundleDevelopmentRegion": "en", "CFBundleDocumentTypes": [ { "CFBundleTypeExtensions": [ "pkg", "mpkg" ], "CFBundleTypeIconFile": "PackageIcon.icns", "CFBundleTypeName": "com.mothersruin.apple-installer-package", "CFBundleTypeOSTypes": [ "pkg1", "mpkg" ], "CFBundleTypeRole": "Viewer", "NSDocumentClass": "SuspiciousPackageDocument" }, { "CFBundleTypeExtensions": [ "bom" ], "CFBundleTypeName": "com.mothersruin.apple-installer-receipt", "CFBundleTypeOSTypes": [ "????" ], "CFBundleTypeRole": "Viewer", "NSDocumentClass": "SuspiciousPackageDocument" }, { "CFBundleTypeExtensions": [ "export-item" ], "CFBundleTypeIconFile": "ExportDocIcon.icns", "CFBundleTypeName": "com.mothersruin.suspicious-package-export", "CFBundleTypeRole": "Viewer", "LSTypeIsPackage": true, "NSDocumentClass": "SuspiciousPackageDocument" } ], "CFBundleExecutable": "Suspicious Package", "CFBundleIconFile": "AppIcon", "CFBundleIconName": "AppIcon", "CFBundleIdentifier": "com.mothersruin.SuspiciousPackageApp", "CFBundleInfoDictionaryVersion": "6.0", "CFBundleName": "Suspicious Package", "CFBundlePackageType": "APPL", "CFBundleShortVersionString": "3.6", "CFBundleSignature": "????", "CFBundleSupportedPlatforms": [ "MacOSX" ], "CFBundleURLTypes": [ { "CFBundleTypeRole": "Viewer", "CFBundleURLName": "com.mothersruin.SuspiciousPackage.AppleInstallerPackage", "CFBundleURLSchemes": [ "x-apple-installer-package" ] } ], "CFBundleVersion": "736", "DTCompiler": "com.apple.compilers.llvm.clang.1_0", "DTPlatformBuild": "11E801a", "DTPlatformVersion": "GM", "DTSDKBuild": "19G68", "DTSDKName": "macosx10.15", "DTXcode": "1170", "DTXcodeBuild": "11E801a", "LSMinimumSystemVersion": "10.14", "MRSAssetCatalogDeploymentTarget": "10.14", "MRSUpdateCheckerDownloadPageURL": "https://www.mothersruin.com/software/SuspiciousPackage/update.html", "NSAppleScriptEnabled": true, "NSDesktopFolderUsageDescription": "NSDesktopFolderUsageDescription", "NSDocumentsFolderUsageDescription": "NSDocumentsFolderUsageDescription", "NSDownloadsFolderUsageDescription": "NSDownloadsFolderUsageDescription", "NSHumanReadableCopyright": "Copyright ยฉ 2008โ2020, Randy Saldinger, dba Mothers Ruin Software. All rights reserved.", "NSMainNibFile": "MainMenu", "NSPrincipalClass": "NSApplication", "NSSupportsAutomaticTermination": true, "NSSupportsSuddenTermination": true, "OSAScriptingDefinition": "SuspiciousPackage.sdef", "UTExportedTypeDeclarations": [ { "UTTypeConformsTo": [ "com.apple.package" ], "UTTypeDescription": "Suspicious Package Item Export", "UTTypeIconFile": "ExportDocIcon.icns", "UTTypeIdentifier": "com.mothersruin.suspicious-package-export", "UTTypeTagSpecification": { "public.filename-extension": [ "export-item" ] } } ] }
{ "fileSize": 0.7270050048828125, "architectures": [ { "bits": "64-bit", "fileType": "Demand Paged Executable File", "header": { "magic": 3489328638, "cputype": 7, "cpusubtype": 3, "filetype": 2, "ncmds": 31, "sizeofcmds": 4400, "flags": [ "The object file has no undefined references and is executable.", "The object file is the input for the dynamic linker and can not be staticly link edited again.", "undefined" ], "reserved": 0 }, "loadCommandsInfo": [ { "description": 4277009103, "size": 3, "offset": " 0x0" }, { "description": "Symbol segment command", "size": 31, "offset": " 0x8" }, { "description": 31, "size": 131205, "offset": " 0x10" }, { "description": 131205, "size": 25, "offset": " 0x18" }, { "description": "64-bits Segment Load Command", "size": 1095786335, "offset": " 0x20" }, { "description": 1095786335, "size": 20306, "offset": " 0x28" }, { "description": 0, "size": 25, "offset": " 0x60" }, { "description": "64-bits Segment Load Command", "size": 1163157343, "offset": " 0x68" } ], "magic": "cffaedfe", "offset": "0", "processorSubType": 3, "processorType": "X86" } ] }