Play interactive tour

Edit tour

macOS Analysis Report installer_v2021

Overview

General Information

Sample Name:	installer_v2021
Analysis ID:	149261
MD5:	1daba393eee9d8bdaf645157dae83990
SHA1:	2303a9c0092f9b0ccac8536419ee48626a253f94
SHA256:	cf5edcff4053e29cb236d3ed1fe06ca93ae6f64f26e25117d68ee130b9bc60c8
Infos:
Most interesting Screenshot:

Detection

MACMA

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Yara detected MACMA aka CDDS

Writes Mach-O files to untypical directories

Contains functionality related to audio recording

Connects to many ports of the same IP (likely port scanning)

Contains functionality related to screen capturing

Executes the "who" command used to get a list of logged in users

Reads system files that contain records of logged in users

Executed dropped file with audio recording capabilities writes audio files to disk

Executed dropped file with screen capturings capabilities writes image and/or video files to disk

Contains functionality related to key logging

Sets full permissions to files and/or directories

Writes PHP files to disk

Contains symbols with suspicious names likely related to encryption

Executes the "chown" command used to modify ownership and group ownership

Contains symbols with suspicious names likely related to networking

Explicitly unloads, stops, and/or removes launch services

Reads the systems hostname

Executes the "mkdir" command used to create folders

Executes the "chmod" command used to modify permissions

Detected TCP or UDP traffic on non-standard ports

Executes the "curl" command used to transfer data via the network (typically using HTTP/S)

Contains symbols with suspicious names likely related to well-known browsers

Creates memory-persistent launch services

Explicitly loads/starts launch services

Creates launch services that start periodically

Creates user-wide 'launchd' managed services aka launch agents

Creates hidden files, links and/or directories

Mach-O contains sections with high entropy indicating compressed/encrypted content

Changes permissions of written Mach-O files

Executes commands using a shell command-line interpreter

Writes 64-bit Mach-O files to disk

Contains functionality related to Data Distribution Service (DDS) indicative for C2 communication

Executes the "rm" command used to delete files or directories

Many shell processes execute programs via execve syscall (might be indicative for malicious behavior)

Classification

General Information

Joe Sandbox Version:
Analysis ID:	149261
Start date:	12.11.2021
Start time:	11:51:27
Joe Sandbox Product:	Cloud
Overall analysis duration:	0h 7m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	installer_v2021
Cookbook file name:	defaultmacfilecookbook.jbs
Analysis system description:	Mac Mini, Mojave (Java JDK 11.0.4, Adobe Reader 2019.012.20034, Flash 32.0.0.223)
Run name:	Potential for more IOCs and behavior
Analysis Mode:	default
Detection:	MAL
Classification:	mal88.troj.spyw.evad.mac@0/18@1/0
Warnings:	Show All Excluded domains from analysis (whitelisted): lb._dns-sd._udp.0.0.168.192.in-addr.arpa

Process Tree

System is mac-mojave

mono-sgen32 New Fork (PID: 637, Parent: 578)

installer_v2021 (MD5: 1daba393eee9d8bdaf645157dae83990) Arguments: /Users/ben/Desktop/installer_v2021

sh New Fork (PID: 638, Parent: 637)

mkdir (MD5: 0948c3e8dfd7f3d3628ca8b819092ccf) Arguments: mkdir /Users/ben/Desktop/~tmp

installer_v2021 New Fork (PID: 639, Parent: 637)

who (MD5: 7b585a0b903dbeb22a525e13f99531e0) Arguments: who

sh New Fork (PID: 640, Parent: 637)

mkdir (MD5: 0948c3e8dfd7f3d3628ca8b819092ccf) Arguments: mkdir /Users/ben/Library/Preferences/Tools

sh New Fork (PID: 641, Parent: 637)

chown (MD5: 4412bd1c28443ef4cc603af3ad92ddc0) Arguments: chown ben:staff /Users/ben/Library/Preferences/Tools

sh New Fork (PID: 642, Parent: 637)

mkdir (MD5: 0948c3e8dfd7f3d3628ca8b819092ccf) Arguments: mkdir /Users/ben/Library/Preferences/UserAgent

sh New Fork (PID: 643, Parent: 637)

chown (MD5: 4412bd1c28443ef4cc603af3ad92ddc0) Arguments: chown ben:staff /Users/ben/Library/Preferences/UserAgent

sh New Fork (PID: 644, Parent: 637)

mkdir (MD5: 0948c3e8dfd7f3d3628ca8b819092ccf) Arguments: mkdir /Users/ben/Library/Preferences/UserAgent/lib

sh New Fork (PID: 645, Parent: 637)

chown (MD5: 4412bd1c28443ef4cc603af3ad92ddc0) Arguments: chown ben:staff /Users/ben/Library/Preferences/UserAgent/lib

sh New Fork (PID: 646, Parent: 637)

mkdir (MD5: 0948c3e8dfd7f3d3628ca8b819092ccf) Arguments: mkdir /Users/ben/Library/LaunchAgents

sh New Fork (PID: 647, Parent: 637)

chown (MD5: 4412bd1c28443ef4cc603af3ad92ddc0) Arguments: chown ben:staff /Users/ben/Library/LaunchAgents

sh New Fork (PID: 648, Parent: 637)

cp (MD5: b78b44666e242cb82db43e70116add92) Arguments: cp /Users/ben/Desktop/~tmp/kAgent /Users/ben/Library/Preferences/Tools

sh New Fork (PID: 649, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 755 /Users/ben/Library/Preferences/Tools/kAgent

sh New Fork (PID: 650, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod u+s /Users/ben/Library/Preferences/Tools/kAgent

sh New Fork (PID: 651, Parent: 637)

cp (MD5: b78b44666e242cb82db43e70116add92) Arguments: cp /Users/ben/Desktop/~tmp/com.UserAgent.va.plist /Users/ben/Library/LaunchAgents

sh New Fork (PID: 652, Parent: 637)

chown (MD5: 4412bd1c28443ef4cc603af3ad92ddc0) Arguments: chown ben:staff /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

sh New Fork (PID: 653, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 644 /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

sh New Fork (PID: 654, Parent: 637)

cp (MD5: b78b44666e242cb82db43e70116add92) Arguments: cp /Users/ben/Desktop/~tmp/arch /Users/ben/Library/Preferences/Tools

sh New Fork (PID: 655, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 755 /Users/ben/Library/Preferences/Tools/arch

sh New Fork (PID: 656, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod u+s /Users/ben/Library/Preferences/Tools/arch

sh New Fork (PID: 657, Parent: 637)

cp (MD5: b78b44666e242cb82db43e70116add92) Arguments: cp /Users/ben/Desktop/~tmp/at /Users/ben/Library/Preferences/Tools

sh New Fork (PID: 658, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 755 /Users/ben/Library/Preferences/Tools/at

sh New Fork (PID: 659, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod u+s /Users/ben/Library/Preferences/Tools/at

sh New Fork (PID: 660, Parent: 637)

cp (MD5: b78b44666e242cb82db43e70116add92) Arguments: cp /Users/ben/Desktop/~tmp/UserAgent /Users/ben/Library/Preferences/UserAgent/lib

sh New Fork (PID: 663, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 755 /Users/ben/Library/Preferences/UserAgent/lib/UserAgent

sh New Fork (PID: 664, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod u+s /Users/ben/Library/Preferences/UserAgent/lib/UserAgent

sh New Fork (PID: 665, Parent: 637)

chmod (MD5: d7df83ea3a49de5d07e0c1730e910852) Arguments: chmod 777 /Users/ben/start.sh

sh New Fork (PID: 666, Parent: 637)

su (MD5: d4a02fef85cf187b4533f0f974abd17e) Arguments: su - ben /Users/ben/start.sh

su New Fork (PID: 667, Parent: 666)

bash (MD5: 0313fd399b143fc40cd52a1679018305) Arguments: -bash /Users/ben/start.sh

bash New Fork (PID: 668, Parent: 667)

launchctl (MD5: 3e04cf4fe184467aa2dbf4e4d5c72f3d) Arguments: launchctl unload -w /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

bash New Fork (PID: 669, Parent: 667)

launchctl (MD5: 3e04cf4fe184467aa2dbf4e4d5c72f3d) Arguments: launchctl load -w /Users/ben/Library/LaunchAgents/com.UserAgent.va.plist

sh New Fork (PID: 671, Parent: 637)

rm (MD5: 269d0bd0553e7eafb6e3f70026eeda2b) Arguments: rm -f /Users/ben/start.sh

sh New Fork (PID: 672, Parent: 637)

rm (MD5: 269d0bd0553e7eafb6e3f70026eeda2b) Arguments: rm -Rf /Users/ben/Desktop/~tmp

xpcproxy New Fork (PID: 670, Parent: 1)

UserAgent (MD5: 3e4de0eeefd2e1c024b41a4222285f74) Arguments: /Users/ben/Library/Preferences/UserAgent/lib/UserAgent -runMode ifneeded

sh New Fork (PID: 674, Parent: 670)

curl (MD5: 28fe026db67bee7a3e38a3e32ef21241) Arguments: curl -o /Users/ben/Library/Preferences/UserAgent/lib/my-ip.php http://cgi1.apnic.net/cgi-bin/my-ip.php

UserAgent New Fork (PID: 675, Parent: 670)

kAgent (MD5: 43f6382a5684330f071b329b3cec69e9) Arguments: kAgent /Users/ben/Library/Preferences/UserAgent/lib/data2 670

sh New Fork (PID: 679, Parent: 670)

arch (MD5: 1bbcb128d992eda1632127c48d6dbfe2) Arguments: /Users/ben/Library/Preferences/Tools/arch /tmp/112211334455997890 1280 720 0.000000

cleanup

Yara Overview

Initial Sample

Source	Rule	Description	Author	Strings
installer_v2021	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
/Users/ben/Desktop/~tmp/UserAgent	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security
/Users/ben/Library/Preferences/UserAgent/lib/UserAgent	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000670.00000327.1.000000010ff4a000.000000010ff68000.rw-.sdmp	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security
00000670.00000327.1.000000010fd92000.000000010ff4a000.r-x.sdmp	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security
Process Memory Space: UserAgent PID: 670	JoeSecurity_MACMA	Yara detected MACMA aka CDDS	Joe Security

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr22GetEncryptFileDataSizeERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEERi
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_set_encrypt_key
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_encrypt_one_block
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_set_decrypt_key
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_decrypt_one_block
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_encrypt
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_cbc_encrypt
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_decrypt
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22IsLocalFileSaveEncryptEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23SetParam_AddEncryptTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25SetParam_AddNoEncryptTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SEND_FILE_ENCRYPTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi29SetParam_DATA_ENCRYPT_DEFAULTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AES_cbc_decrypt
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr22GetEncryptFileDataSizeERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEERi
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_set_encrypt_key
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_encrypt_one_block
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_set_decrypt_key
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_decrypt_one_block
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_encrypt
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_cbc_encrypt
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_decrypt
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi22IsLocalFileSaveEncryptEv
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi23SetParam_AddEncryptTypeEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi25SetParam_AddNoEncryptTypeEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SEND_FILE_ENCRYPTEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: __ZN7CDDSIfi29SetParam_DATA_ENCRYPT_DEFAULTEi
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AES_cbc_decrypt

Networking:

Connects to many ports of the same IP (likely port scanning)

Show sources

Source: global traffic

TCP traffic: 123.1.170.152 ports 12580,0,1,2,5,8

Source: global traffic

TCP traffic: 192.168.0.51:49345 -> 123.1.170.152:12580

Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI25CDDSRequestCancelDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI22CDDSChangeDDSPwdStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI22CDDSFileTransferStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI19CDDSRequestDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI19CDDSFTSRecvThrQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI19CDDSFTSSendThrQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI18CDDSOpWaitCheckThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI17CDDSFTSRecvThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI16CDDSClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI16CDDSClientStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI15CDDSLoginStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI14CDDSHostStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI10CDDSSndThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC17CDDSFTSSendThrMgr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC18CDDSOpWaitCheckThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC14CDDSFTSSendThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC17CDDSFTSRecvThrMgr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC14CDDSFTSRecvThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC10CDDSSndThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC10CDDSRcvThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr4InitERKNSt3__16vectorIiNS0_9allocatorIiEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr22HandleRecvDDSHeartBeatEP21TAG_CDataDDCHeartBeat
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr23HandlePassiveConnectACKEP26TAG_CDataPassiveConnectACK
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr24HandleChangeDDSPwdStatusEP27TAG_CDataChangeDDSPwdStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr24HandleNotifyClientRealIPEP21TAG_CDataClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr24ReturnFileTransferStatusEii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr25CreatePassiveListenSocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr25HandleHeartBeatCheckTimerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr25InitReconnectNotifySocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr22HandlePassiveConnectInEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr9ReconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrC1EPK7CDDSIfiP17CDDSFTSRecvThrMgrP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrC2EPK7CDDSIfiP17CDDSFTSRecvThrMgrP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThr4InitEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr8GetDDSFDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThr9Send2HostEP9CDataHead
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThrC1EPK7CDDSIfiPK10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThrC2EPK7CDDSIfiPK10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj12CreateObjectEPKS_
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj18m_mapClass2CreatorE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj20CDDSNetObj_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj12CreateObjectERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj12CreateObjectERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj14BeginSerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj16BeginUnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj18CDDSNetObj_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObj18CDDSNetObj_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr13ActiveConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr13HandleDDSDataEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObjC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObjC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObjD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObjD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSNetObjD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr12HandlePacketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr21HandleLogin2DDSStatusEP24TAG_CDataLogin2DDSStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr21InitIntervalMsgSocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr13SendHeartBeatEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr14PassiveConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr15SendIntervalMsgERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr17PerformDisconnectEb
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr19AfterConnectSuccessEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr19GetDDSIntervalMsgFDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr19SetPassiveConnectFDEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr21HandleECDHKeyExchangeEP24TAG_CDataECDHKeyExchange
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr14CancelSendFileEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr16HandleTaskExceedEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr19HandleSendFileTimerEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr19SendTransferMode2C2Ei
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20HandleC2PrepareReadyEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20HandleCancelSendFileEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20MatchSimpleRandomMD5ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEES8_
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr21SendFileTransferErrorEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr13GetTaskClientEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr13HandleFTSDataEjPcib
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr23SendFileTransferRequestEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr24HandleC2ACKBaseInfoV2_V3Ei
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr25HandleWaitC2ConnInTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr9GetTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrC1EPK7CDDSIfiP17CDDSFTSSendThrMgrRKNSt3__112basic_stringIcNS5_11char_traitsIcEENS5_9allocatorIcEEEEj4IP32SE_jSD_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrC2EPK7CDDSIfiP17CDDSFTSSendThrMgrRKNSt3__112basic_stringIcNS5_11char_traitsIcEENS5_9allocatorIcEEEEj4IP32SE_jSD_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22HandleC2ACKFileContentEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22HandleRecvFileCompleteEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22SetWaitC2ConnInTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus22CDDSHostStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus22CDDSHostStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus24CDDSHostStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSHostStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi15SyncDDSCompleteEc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi15WaitForSendOverEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16GetDDSListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16GetFTSListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetDDSServerIPEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetExcludePortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetQueueStatusEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14SetConnectModeE12CONNECT_MODERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi15ClearAllECDHKeyEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi15GetC2ACKTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17SetParam_ServerIPEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18GetPassiveListenIPEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18GetVersionOfClientEji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16GetSubscribeTypeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16InitNotifySocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16NotifyHostStatusE4IP32i
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16RemoteCallReturnEiPcji9CDataGUID
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17ProcessHandleFuncEP10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17SendFile_PushTaskERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32S9_jS8_b
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17SetParam_ProcTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19GetProcTypeOfClientEji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19PushSndToHstForSendEPci
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18NotifyClientStatusE4IP32jii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18PushSndToHstForGetEPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18PushSndToHstNotifyEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18SetSendOverSinglalEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19Distribute_PushDataEiPcji4IP32jbbS0_
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19GetAllSubnetDDSInfoEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19GetDDSIntervalMsgFDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19GetLocalFileSaveKeyEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetSndToHstForGetQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19SetPassiveConnectFDEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19SetRecvQueueMaxSizeEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20BeginECDHKeyExchangeE4IP32jRK7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20BeginSendPrePushDataE4IP32jPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetC2RecvDataTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetPacketACKIntervalEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetPassiveListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetSendFilePacketLenEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19SetParam_ServerAddrERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr11GetServerIPEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr12ReturnStatusEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr10UnlockFileEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr11Add2ExitThrEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr18HandleFileBaseInfoEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr18SendFileContentACKEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr19CalcSimpleRandomMD5ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr13HandleFTSDataEjPcib
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr13SendTaskIDACKEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr14CancelRecvFileEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr15GetClientTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr15GetServerTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr17CloseFileAndFlushEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr17HandleFileContentEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr8LockFileEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThrC1EPK7CDDSIfiP17CDDSFTSRecvThrMgrjj4IP32bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr19CheckCancelRecvFlagEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr19SendFileBaseInfoACKEiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr20SendRecvFileCompleteEiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr21SendFileBaseInfoACKV2ExRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr22GetEncryptFileDataSizeERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEERi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr22HandleC1TransferModeC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr23HandleFileBaseInfoV2_V3Ei
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr11Add2ExitThrEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr11GetTaskHostEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12ReturnStatusEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThrC2EPK7CDDSIfiP17CDDSFTSRecvThrMgrjj4IP32bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10DistributeEiPcji4IP32j
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10RemoteCallEiPcjPS0_PjP9CDataGUIDjb
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10Send2LocalEP10CDDSNetObjj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10SetDDSInfoEP20TAG_CDataAllSubnetIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11GetProcTypeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11IsSubScribeERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11ProcTypeA2IERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11PutWaitDataEP9CDataWait
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11SetProcTypeEjPNSt3__16vectorIiNS0_9allocatorIiEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi12ChangeDDSPwdEjRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11AssignedPIDEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11GetClientIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11GetHostIP32Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11GetNotifyFDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13PacketTypeI2AEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13SendHeartBeatEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14CancelSendFileE4IP32jj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GenerateTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetConnectModeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi12GetQueueDataEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi12GetTimeOutOpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13ChangeDDSInfoE4IP32ii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13GetNotifyAddrEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13PacketTypeA2IERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N18CDDSOpWaitCheckThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N18CDDSOpWaitCheckThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSRecvThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSRecvThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSRecvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSRecvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N10CDDSSndThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N10CDDSRcvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N10CDDSSndThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N10CDDSRcvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSRecvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSRecvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N10CDDSRcvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSRecvThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N10CDDSRcvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N10CDDSRcvThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N18CDDSOpWaitCheckThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr19WaitC2ConnInTimeoutEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N18CDDSOpWaitCheckThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr8SendFileEP7CDDSIfiRKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEj4IP32SB_jSA_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N18CDDSOpWaitCheckThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSRecvThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr10AddExitThrEP14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr14CancelSendFileE4IP32jji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSRecvThrQueue15join_and_deleteEP14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSRecvThrQueue6cancelE4IP32jj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue13waitc2timeoutEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThr22HandleRequestOPTimeOutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThrC1EPK7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN18CDDSOpWaitCheckThrC2EPK7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus23CDDSLoginStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus23CDDSLoginStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus25CDDSLoginStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN15CDDSLoginStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus24CDDSClientStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus24CDDSClientStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP24CDDSClientRealIP_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP24CDDSClientRealIP_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP26CDDSClientRealIP_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIPC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIPC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus26CDDSClientStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgr14CancelRecvFileE4IP32jj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgr8RecvFileEP7CDDSIfij4IP32jjS2_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgrC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgrC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSRecvThrMgr10AddExitThrEP14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22IsLocalFileSaveEncryptEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22PassiveConnectToClientEii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_DDSListenPortEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetSndToHstNotifyQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20SendECDHKeyBob2AliceE4IP32jRK7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi21FindECDHClientKeyInfoERK10ECDHClientR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi21GetFIRST_SYNC_TIMEOUTEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi21GetSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22ClearSndToHstForGetQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22ClearSndToHstNotifyQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24GetMAX_FILE_TRANSFER_THREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24GetSizeSndToHstForGetQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_FTSListenPortEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_LoginToDDSKeyERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_SubscribeTypeERKNSt3__16vectorIiNS0_9allocatorIiEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23ClearSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23GetAllClientsOfProcTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23SetParam_AddEncryptTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23SetParam_C2_ACK_TIMEOUTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24GetDDC_HEARTBEAT_TIMEOUTEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetMAX_FTS_VALID_DATA_LENEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24GetWindowsFilenameAsUTF8Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24SetParam_LocalFileAesKeyERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24SetWindowsFilenameAsUTF8Eb
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25FindAndSaveAliceECDHParamEP24TAG_CDataECDHKeyExchangeR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetCONNECT_TO_DDS_TIMEOUTEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetDDC_HEARTBEAT_INTERVALEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetFileTransferResumeModeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetMAX_DDS_VALID_DATA_LENEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi24GetSizeSndToHstNotifyQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25SetParam_AddNoEncryptTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25SetParam_RegisterDataTypeERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEib
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26ClearECDHKeyAndPreSaveDataE4IP32j
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26FindAndSaveBobAckECDHParamEP24TAG_CDataECDHKeyExchangeR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26FindOrAddECDHClientKeyInfoERK10ECDHClientR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_PacketACKIntervalEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SEND_FILE_ENCRYPTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SendFilePacketLenEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetSizeSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25SetFileTransferResumeModeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi29SetParam_DATA_ENCRYPT_DEFAULTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi30SetParam_DDC_HEARTBEAT_TIMEOUTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi30SetParam_ECDH_EXCHANGE_TIMEOUTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi30SetParam_MAX_FILE_TRANSFER_THREi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi31SetParam_DDC_HEARTBEAT_INTERVALEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi31SetParam_MAX_DDS_VALID_DATA_LENEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi31SetParam_MAX_FTS_VALID_DATA_LENEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi28GetFileTransferSizeResumeMD5Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi28SetParam_ECDH_EXCHANGE_AGAINEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi29SetParam_C2_RECV_DATA_TIMEOUTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi6NotifyEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8GetSeqNOEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8PushDataEP9CDataHead
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8Send2OwnEP10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8SendFileERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32jS8_b
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9GetWaitOpERK9CDataGUID
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi4InitERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEES8_S8_S8_
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi4InitEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSRecvThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi4RecvEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi4SendEP10CDDSNetObji4IP32j
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSRecvThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSRecvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSRecvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSRecvThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfiC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfiC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfiD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfiD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfiD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9Login2DDSEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9ReconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9StartWorkEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSSndThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9SubScribeERKNSt3__16vectorIiNS0_9allocatorIiEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9SubScribeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSSndThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSSndThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSRcvThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSRcvThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N10CDDSRcvThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV25CDDSRequestCancelDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV22CDDSFileTransferStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV19CDDSRequestDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV22CDDSChangeDDSPwdStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV18CDDSOpWaitCheckThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV17CDDSFTSRecvThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV16CDDSClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV16CDDSClientStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV15CDDSLoginStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV14CDDSHostStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV10CDDSSndThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT18CDDSOpWaitCheckThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT17CDDSFTSRecvThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT10CDDSSndThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTSN3YYZ12MonitorQueueIP14CDDSFTSRecvThrEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTSN3YYZ12MonitorQueueIP14CDDSFTSSendThrEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS25CDDSRequestCancelDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus30CDDSFileTransferStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus30CDDSFileTransferStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus32CDDSFileTransferStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus32CDDSChangeDDSPwdStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH7set_ftsEP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSFileTransferStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN23CPreSendFileForWaitECDH10set_netifiEP7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus32CDDSPassiveConnectStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus32CDDSPassiveConnectStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus34CDDSPassiveConnectStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN24CDDSPassiveConnectStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload33CDDSRequestCancelDownload_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload33CDDSRequestCancelDownload_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload35CDDSRequestCancelDownload_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownload9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownloadC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN25CDDSRequestCancelDownloadC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS22CDDSChangeDDSPwdStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS22CDDSFileTransferStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS19CDDSFTSSendThrQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS19CDDSRequestDownload
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS18CDDSOpWaitCheckThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS19CDDSFTSRecvThrQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS17CDDSFTSRecvThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS16CDDSClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS16CDDSClientStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS15CDDSLoginStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS14CDDSHostStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS14CDDSFTSRecvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS10CDDSSndThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS10CDDSRcvThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload27CDDSRequestDownload_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload27CDDSRequestDownload_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload29CDDSRequestDownload_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownload9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownloadC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSRequestDownloadC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue15join_and_deleteEP14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue6cancelE4IP32jji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN21DDSNetObj_INITIALIZORC1ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEPFP10CDDSNetObjvEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN21DDSNetObj_INITIALIZORC2ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEPFP10CDDSNetObjvEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus30CDDSChangeDDSPwdStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN22CDDSChangeDDSPwdStatus30CDDSChangeDDSPwdStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN21CPreSendDataHeadQueue10set_netifiEP7CDDSIfi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTIN3YYZ12MonitorQueueIP14CDDSFTSSendThrEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTIN3YYZ12MonitorQueueIP14CDDSFTSRecvThrEE

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49340
Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49338

Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.57.207

Source: UserAgent, 00000670.00000327.1.000000010fd92000.000000010ff4a000.r-x.sdmp	String found in binary or memory: http://cgi1.apnic.net/cgi-bin/my-ip.php
Source: UserAgent, 00000670.00000327.1.000000010fd92000.000000010ff4a000.r-x.sdmp	String found in binary or memory: http://cgi1.apnic.net/cgi-bin/my-ip.phpcurlBuf
Source: installer_v2021, 00000637.00000255.1.000000010afbc000.000000010afe3000.r--.sdmp	String found in binary or memory: http://crl.apple.com/codesigning.crl0
Source: installer_v2021, 00000637.00000255.1.000000010afbc000.000000010afe3000.r--.sdmp	String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd
Source: installer_v2021, 00000637.00000255.1.000000010afbc000.000000010afe3000.r--.sdmp	String found in binary or memory: http://www.apple.com/appleca/root.crl0
Source: installer_v2021, 00000637.00000255.1.000000010afbc000.000000010afe3000.r--.sdmp	String found in binary or memory: http://www.apple.com/certificateauthority0
Source: installer_v2021, 00000637.00000255.1.000000010afbc000.000000010afe3000.r--.sdmp	String found in binary or memory: https://www.apple.com/appleca/0

Source: unknown

DNS traffic detected: queries for: cgi1.apnic.net

Source: global traffic

HTTP traffic detected: GET /cgi-bin/my-ip.php HTTP/1.1Host: cgi1.apnic.netUser-Agent: curl/7.54.0Accept: */*

Key, Mouse, Clipboard, Microphone and Screen Capturing:

Contains functionality related to audio recording

Show sources

Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueNewInput
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueStart
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueAllocateBuffer
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueEnqueueBuffer
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueEnqueueBuffer
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueAllocateBuffer
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueNewInput
Source: dropped file UserAgent.255.dr	Mach-O symbol: _AudioQueueStart
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueNewInput
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueStart
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueAllocateBuffer
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueEnqueueBuffer
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueEnqueueBuffer
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueAllocateBuffer
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueNewInput
Source: dropped file UserAgent.303.dr	Mach-O symbol: _AudioQueueStart

Contains functionality related to screen capturing

Show sources

Source: dropped file arch.255.dr	Mach-O symbol: _CGWindowListCreateImageFromArray
Source: dropped file arch.255.dr	Mach-O symbol: _CGWindowListCreateImageFromArray
Source: dropped file arch.291.dr	Mach-O symbol: _CGWindowListCreateImageFromArray
Source: dropped file arch.291.dr	Mach-O symbol: _CGWindowListCreateImageFromArray

Executed dropped file with audio recording capabilities writes audio files to disk

Show sources

Source: /usr/libexec/xpcproxy (PID: 670)

AIFF file created by process with audio recording functionality: /Users/ben/Library/Preferences/UserAgent/lib/data1/.tmp/1636717998

Jump to dropped file

Executed dropped file with screen capturings capabilities writes image and/or video files to disk

Show sources

Source: /bin/sh (PID: 679)

JPEG file created by process with screen capturing functionality: /private/tmp/.112211334455997890-b8ZA

Jump to dropped file

Contains functionality related to key logging

Show sources

Source: dropped file kAgent.255.dr	Mach-O symbol: _CGEventTapCreate
Source: dropped file kAgent.255.dr	Mach-O symbol: _CGEventTapEnable
Source: dropped file kAgent.255.dr	Mach-O symbol: _CGEventTapEnable
Source: dropped file kAgent.255.dr	Mach-O symbol: _CGEventTapCreate
Source: dropped file kAgent.279.dr	Mach-O symbol: _CGEventTapCreate
Source: dropped file kAgent.279.dr	Mach-O symbol: _CGEventTapEnable
Source: dropped file kAgent.279.dr	Mach-O symbol: _CGEventTapEnable
Source: dropped file kAgent.279.dr	Mach-O symbol: _CGEventTapCreate

Source: classification engine

Classification label: mal88.troj.spyw.evad.mac@0/18@1/0

Source: submission installer_v2021	Mach-O symbol: __Z13GetSocketTypej
Source: submission installer_v2021	Mach-O symbol: __Z14IsNotConnectedv
Source: submission installer_v2021	Mach-O symbol: __Z14ConnectTimeoutjPK8sockaddrii
Source: submission installer_v2021	Mach-O symbol: _sendto
Source: submission installer_v2021	Mach-O symbol: _setsockopt
Source: submission installer_v2021	Mach-O symbol: _socket
Source: submission installer_v2021	Mach-O symbol: _send
Source: submission installer_v2021	Mach-O symbol: __Z15IsConnectFailedv
Source: submission installer_v2021	Mach-O symbol: __Z16IsConnectionLostv
Source: submission installer_v2021	Mach-O symbol: __Z15CreateTcpSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi
Source: submission installer_v2021	Mach-O symbol: __Z17SetSendBufferSizeji
Source: submission installer_v2021	Mach-O symbol: __Z17GetSendBufferSizejRi
Source: submission installer_v2021	Mach-O symbol: __Z17GetSocketBindPortj
Source: submission installer_v2021	Mach-O symbol: __Z19IsConnectInProgressv
Source: submission installer_v2021	Mach-O symbol: __Z11GetPeerPortj
Source: submission installer_v2021	Mach-O symbol: __ZN3YYZ6Thread10SendNotifyEiPKci
Source: submission installer_v2021	Mach-O symbol: _connect
Source: submission installer_v2021	Mach-O symbol: __ZN3YYZ6Thread15AddNotifyOnPortEiPNS_13CInputHandlerE
Source: submission installer_v2021	Mach-O symbol: __Z27ConnectTimeoutWithInterruptjPK8sockaddriiPi
Source: submission installer_v2021	Mach-O symbol: __ZN3YYZ6Thread16SendNotifyToPortEiPKci
Source: submission installer_v2021	Mach-O symbol: __Z19IsConnectionRefusedv
Source: submission installer_v2021	Mach-O symbol: __Z21CreateTcpListenSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi
Source: submission installer_v2021	Mach-O symbol: _getsockname
Source: submission installer_v2021	Mach-O symbol: _getsockopt
Source: submission installer_v2021	Mach-O symbol: __ZN3YYZ6Thread11SocketErrorEPKcP7__sFILE
Source: submission installer_v2021	Mach-O symbol: _inet_addr
Source: submission installer_v2021	Mach-O symbol: _inet_ntoa
Source: submission installer_v2021	Mach-O symbol: __ZN3YYZ6Thread19InitTriggerSocketFDEv
Source: submission installer_v2021	Mach-O symbol: __Z6SendNBjRPcRibPK8sockaddr
Source: dropped file kAgent.255.dr	Mach-O symbol: _CFMachPortCreateRunLoopSource
Source: dropped file kAgent.255.dr	Mach-O symbol: _objc_msgSend
Source: dropped file arch.255.dr	Mach-O symbol: _objc_msgSend_stret
Source: dropped file arch.255.dr	Mach-O symbol: _objc_msgSend
Source: dropped file at.255.dr	Mach-O symbol: _inet_ntoa
Source: dropped file at.255.dr	Mach-O symbol: _kIOMasterPortDefault
Source: dropped file at.255.dr	Mach-O symbol: _objc_msgSend
Source: dropped file at.255.dr	Mach-O symbol: _NSSearchPathForDirectoriesInDomains
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI21CPreSendDataHeadQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI19CDDSFTSSendThrQueue
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI16CDDSClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI16CDDSClientStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTI14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC17CDDSFTSSendThrMgr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTC14CDDSFTSSendThr0_N3YYZ6ThreadE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr23HandlePassiveConnectACKEP26TAG_CDataPassiveConnectACK
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr24HandleNotifyClientRealIPEP21TAG_CDataClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr25CreatePassiveListenSocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr25InitReconnectNotifySocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr22HandlePassiveConnectInEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr9ReconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrC1EPK7CDDSIfiP17CDDSFTSRecvThrMgrP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThrC2EPK7CDDSIfiP17CDDSFTSRecvThrMgrP17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: _socket
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: _setsockopt
Source: dropped file UserAgent.255.dr	Mach-O symbol: _send
Source: dropped file UserAgent.255.dr	Mach-O symbol: _sendto
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CLIENT_PIDC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CLIENT_PIDC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSSndThr9Send2HostEP9CDataHead
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN3YYZ6Thread11SocketErrorEPKcP7__sFILE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN3YYZ6Thread10SendNotifyEiPKci
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN3YYZ6Thread19InitTriggerSocketFDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN3YYZ6Thread15AddNotifyOnPortEiPNS_13CInputHandlerE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN3YYZ6Thread16SendNotifyToPortEiPKci
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr13ActiveConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr21InitIntervalMsgSocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr13SendHeartBeatEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr14PassiveConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr15SendIntervalMsgERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr17PerformDisconnectEb
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr19AfterConnectSuccessEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN10CDDSRcvThr19SetPassiveConnectFDEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: _objc_msgSend
Source: dropped file UserAgent.255.dr	Mach-O symbol: _objc_msgSendSuper2
Source: dropped file UserAgent.255.dr	Mach-O symbol: _inet_addr
Source: dropped file UserAgent.255.dr	Mach-O symbol: _inet_ntoa
Source: dropped file UserAgent.255.dr	Mach-O symbol: _getsockname
Source: dropped file UserAgent.255.dr	Mach-O symbol: _getsockopt
Source: dropped file UserAgent.255.dr	Mach-O symbol: _gethostbyname
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr14CancelSendFileEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr16HandleTaskExceedEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr19HandleSendFileTimerEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr19SendTransferMode2C2Ei
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20HandleC2PrepareReadyEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20HandleCancelSendFileEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr20MatchSimpleRandomMD5ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEES8_
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr21SendFileTransferErrorEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr13GetTaskClientEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr13HandleFTSDataEjPcib
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr23SendFileTransferRequestEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr24HandleC2ACKBaseInfoV2_V3Ei
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr25HandleWaitC2ConnInTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr9GetTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrC1EPK7CDDSIfiP17CDDSFTSSendThrMgrRKNSt3__112basic_stringIcNS5_11char_traitsIcEENS5_9allocatorIcEEEEj4IP32SE_jSD_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrC2EPK7CDDSIfiP17CDDSFTSSendThrMgrRKNSt3__112basic_stringIcNS5_11char_traitsIcEENS5_9allocatorIcEEEEj4IP32SE_jSD_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22HandleC2ACKFileContentEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22HandleRecvFileCompleteEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr22SetWaitC2ConnInTimeoutEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi15WaitForSendOverEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16GetDDSListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16GetFTSListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetDDSServerIPEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetExcludePortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14SetConnectModeE12CONNECT_MODERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17SetParam_ServerIPEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18GetVersionOfClientEji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi16InitNotifySocketEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi17SendFile_PushTaskERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32S9_jS8_b
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19GetProcTypeOfClientEji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19PushSndToHstForSendEPci
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18NotifyClientStatusE4IP32jii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi18SetSendOverSinglalEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19SetPassiveConnectFDEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20BeginSendPrePushDataE4IP32jPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetPassiveListenPortEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20GetSendFilePacketLenEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi19SetParam_ServerAddrERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr11GetServerIPEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr18SendFileContentACKEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr13SendTaskIDACKEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr15GetClientTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr15GetServerTaskIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr19SendFileBaseInfoACKEiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr20SendRecvFileCompleteEiRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr21SendFileBaseInfoACKV2ExRKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSRecvThr7ConnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr11Add2ExitThrEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr11GetTaskHostEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN14CDDSFTSSendThr12ReturnStatusEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10DisconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi10Send2LocalEP10CDDSNetObjj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi11GetClientIDEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi13SendHeartBeatEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14CancelSendFileE4IP32jj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi14GetConnectModeEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: _connect
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTv0_n24_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn200_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr19WaitC2ConnInTimeoutEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr8SendFileEP7CDDSIfiRKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEj4IP32SB_jSA_bPc
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N17CDDSFTSSendThrMgrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgrD2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr10AddExitThrEP14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr12TimerHandlerEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CDDSFTSSendThrMgr14CancelSendFileE4IP32jji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN19CDDSFTSSendThrQueue13waitc2timeoutEj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z11GetPeerPortj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus11UnserializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus24CDDSClientStatus_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus24CDDSClientStatus_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP24CDDSClientRealIP_CREATOREv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP24CDDSClientRealIP_VERSIONE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP26CDDSClientRealIP_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIP9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIPC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientRealIPC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CAllSubnetDDSInfo18getOneDDSClientSetE4IP32
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus26CDDSClientStatus_CLASSNAMEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus4DumpEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatus9SerializeERN3YYZ6ParcelE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatusC1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN16CDDSClientStatusC2Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN17CAllSubnetDDSInfo23getAllClientsOfProcTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22PassiveConnectToClientEii
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_DDSListenPortEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi20SendECDHKeyBob2AliceE4IP32jRK7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi21FindECDHClientKeyInfoERK10ECDHClientR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi21GetSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi22SetParam_FTSListenPortEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23ClearSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi23GetAllClientsOfProcTypeEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetCONNECT_TO_DDS_TIMEOUTEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26FindOrAddECDHClientKeyInfoERK10ECDHClientR7ECDHKEY
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SEND_FILE_ENCRYPTEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi26SetParam_SendFilePacketLenEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi25GetSizeSndToHstForSendQueEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8Send2OwnEP10CDDSNetObj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi8SendFileERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEj4IP32jS8_b
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi4SendEP10CDDSNetObji4IP32j
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThrD1Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThr12InputHandlerEiPKvi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZThn184_N14CDDSFTSSendThrD0Ev
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZN7CDDSIfi9ReconnectEv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV16CDDSClientRealIP
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV16CDDSClientStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTV14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT17CDDSFTSSendThrMgr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTT14CDDSFTSSendThr
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTSN3YYZ12MonitorQueueIP14CDDSFTSSendThrEE
Source: dropped file UserAgent.255.dr	Mach-O symbol: __ZTS24CDDSPassiveConnectStatus
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z15IsConnectFailedv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z14IsNotConnectedv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z15CreateTcpSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z17GetSendBufferSizejRi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z16IsConnectionLostv
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z17SetSendBufferSizeji
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z17GetSocketBindPortj
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z21CreateTcpListenSocketRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEi
Source: dropped file UserAgent.255.dr	Mach-O symbol: __Z19IsConnectInProgressv
Source: dropped file UserAgent.255.d

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

macOS Analysis Report installer_v2021

Overview

General Information

Detection

Signatures

Classification

General Information

Process Tree

Yara Overview

Initial Sample

Dropped Files

Memory Dumps

Jbx Signature Overview

Cryptography:

Networking:

Key, Mouse, Clipboard, Microphone and Screen Capturing:

System Summary:

Data Obfuscation: