Skip to content

Instantly share code, notes, and snippets.

@applch

applch/XProtect v2098

Last active January 17, 2018 09:22
Show Gist options
  • Save applch/734febbcab22cfaab71416c1fa7d27d1 to your computer and use it in GitHub Desktop.
Save applch/734febbcab22cfaab71416c1fa7d27d1 to your computer and use it in GitHub Desktop.
Download ZIP
Apple XProtect
Raw
XProtect v2098
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<array>
<dict>
<key>Description</key>
<string>OSX.Bundlore.D</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.applescript.script</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>46617364554153</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.applescript.script</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>20006500630068006F002000</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.applescript.script</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>20007C0020006F00700065006E00730073006C00200065006E00630020002D006100650073002D003200350036002D0063006600620020002D007000610073007300200070006100730073003A</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.applescript.script</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>002D00730061006C00740020002D00410020002D00610020002D00640020007C002000620061007300680020002D0073</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.ParticleSmasher.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>636F756C646E2774206F70656E2074686520646200</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>25402F4F504552412E7A697000</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>25402F4348524F4D455F25402E7A697000</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>25402F5341464152492E7A697000</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>25402F46495245464F585F25402E7A697000</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>63702025402F706C616365732E73716C6974652025402F706C616365732E73716C6974652E64756D7000</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>63702025402F486973746F72792025402F486973746F72792E64756D7000</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.HiddenLotus.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>002F00256C640000000000000000000000</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>0072620000202600000000000000</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>0025640020323E26310072000D0A0000</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>002530327800000000000000</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>003D003B000000</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.AdLoad.B.2</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>488B??????????488D5DB8488903C74308000000C2C7430C00000000488D??????????48894310488D??????????488943184C89F7????????????488943204C89FF4889DE??????????4C89FF??????488B7B20??????4883C430</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>67657453616661726956657273696F6E</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Mughthesec.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>42756E646C654D655570</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>5075626C69736865724F666665725374617465</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>496E7374616C6C50726F67726573735374617465</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>416476657274697365724F666665725374617465</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>42657254616767656444617461</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4245525072696E7456697369746F72</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.AceInstaller.B.2</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>7365744F66666572734C6162656C</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2F746D702F707363722E7368</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2F746D702F4F66666572256C642E7368</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2F746D702F6D7363722E7368</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Hmining.D</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>7772697465506872617365436A</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>6765744D617463684170704964</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>696E7374616C6C335061727479</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>6765745365744F666665727346696C746572</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Bundlore.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.applescript.script</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>46617364554153</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.applescript.script</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>6900660020005B005B002000220024007B006F0073007600650072007D00220020003D003D0020002A002200310030002E003100320022002A0020005D005D003B0020007400680065006E00200076006500720046006F006C006400650072003D0022005300690065007200720061002F0022003B002000660069003B000A0020002000200020006300750072006C0020002D0073004C0020002D006F002000220024007B0054004D0050004400490052007D00</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.applescript.script</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2000200020002000630068006D006F00640020002B0078002000220024007B0054004D0050004400490052007D002F00</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.applescript.script</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>200072006D0020002D00720066002000220024007B0054004D0050004400490052007D002F006D006D005F0073007400750062002200</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.AceInstaller.B.1</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>416365496E7374616C6C6572</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2F746D702F707363722E7368</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2F746D702F4F66666572256C642E7368</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2F746D702F6D7363722E7368</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.AdLoad.B.1</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>736574496E7374616C6C46696E697368656454657874</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>73657446696E6973685469636B496D61676556696577</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4F66666572436F6E74726F6C6C6572</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>264F464645525F49443D2540</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.AdLoad.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>7365744F6666657255726C</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>7365744F6666657250617468</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>7365744F666665724E616D65</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2F746D702F50726F647563742E646D67</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Mughthesec.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>54524D435F496E7374616C6C5F53746172745F31</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>66616C6C6261636B446D674E616D65</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>66616C6C6261636B496E7374616C6C65724E616D65</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>6F6666657253637265656E55726C</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>42657254616767656444617461</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4245525072696E7456697369746F72</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Leverage.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>FF6563686F20273C3F786D6C20</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>72626672616D65776F726B2E64796C6962</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>6C61756E636863746C206C6F6164207E2F4C6962726172792F4C61756E63684167656E7473</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>6D6B646972207E2F4C6962726172792F4C61756E63684167656E7473</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>6D57616974466F7254686973436F6D6D616E64</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>6D57616974696E67466F7241436F6D6D616E64</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.ATG15.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>807C393C32BABB80F3B9B434B8343980</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>FCBF34BA7CBA3436B9BCBA3C807C393C</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>32BABB76BA343CB9BFB78F30B3B93C32</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>9C8589278B9C8589278B9C8589278B9C</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Genieo.G.1</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>696E7374616C6C5F75726C5F737566666978</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>7665725F6461</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>6F666665725F6964</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Genieo.G</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>676574536166617269486973746F7279</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>73656C65637420636F756E74282A292066726F6D206D6F7A5F686973746F7279766973697473</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>534645585446696C654D616E61676572</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Proton.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>qOqC7nZwkQmLDidagNJdO8eeDOo=</data>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Dok.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>53656C66496E7374616C6C</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>49734C6F67696E536372697074457869737473</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4164644C6F67696E536372697074</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4979457664584E794C324A706269396C626E596763486C306147397543694D674C536F7449474E765A476C755A7A6F676458526D4C5467674C536F74436D6C7463</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Dok.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>44697361626C6555706461746573</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>496E7374616C6C546F72</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>496E7374616C6C43657274</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>626173653634202D69202540</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Findzip.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>546B395549466C50565649675445464F523156425230552F494656545253426F64485277637A6F764C3352795957357A624746305A53356E6232396E624755755932397444516F4E436C646F5958516761474677634756755A57516764473867655739316369426D6157786C6379412F445170</string>
</dict>
<dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2F7573722F62696E2F66696E64</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>7B7D2E6372797074</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>52454541444D45212E747874</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2F7573722F62696E2F6469736B7574696C</string>
</dict>
</array>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.XAgent.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>public.unix-executable</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>726D202D72662025402F4C6962726172792F417373697374616E74732F2E6C6F63616C2F</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>53454C45435420686F73746E616D652C20656E63727970746564557365726E616D652C20656E6372797074656450617373776F7264</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>490FBE1407418D45FD490FBE3407418D7DFF418D45FE490FBE1C074883FB3DB800000000B901000000740A420FB60433B902000000428A1C32420FB6343689FA490FBE3C174531C04883FF3D740E460FB604374183E03FB903000000C0E3024088F2C0EA0480E20308DA8855D5C1E60489C2C1EA0283E20F09F28855D6C1E0064409C08845D74C89E7</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.iKitten.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>696620636174202F6574632F72632E636F6D6D6F6E207C20677265702025403B</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>7A6970202D72202D6A202540202540</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4883F800488985C0FEFFFF0F84FC01000031C089C1488D95F0FEFFFF4883C210488BB500FFFFFF488B36488BBDC0FEFFFF4889B5B8FEFFFF488995B0FEFFFF48898DA8FEFFFF4889BDA0FEFFFF488B85A0FEFFFF488B8DA8FEFFFF488B95B0FEFFFF488B32488BBDB8FEFFFF48393E48898598FEFFFF48898D90FEFFFF0F840F000000488B85C8FEFFFF4889C7</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>488945E0488B3D80380300488B35E933030041B8040000004489C14531C04489C2488955C04889C248894DB84C8B45C0488B45C8{2}4889C7{5}488945D8488B354A340300488D1513180300488D0D6C1703004889C7488B45C8{2}4889C7</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Proton.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4E6574776F726B20436F6E66696775726174696F6E206E6565647320746F2075706461746520444843502073657474696E67732E205479706520796F75722070617373776F726420746F20616C6C6F7720746869732E
4E6574776F726B20436F6E66696775726174696F6E206E6565647320746F2075706461746520444843502073657474696E67732E205479706520796F75722070617373776F726420746F20616C6C6F7720746869732E</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>496E7374616C6C65722077616E747320746F206D616B65206368616E6765732E205479706520796F75722070617373776F726420746F20616C6C6F772074686973</string>
</dict>
</array>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>66696C655F75706C6F6164</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>7373685F74756E6E656C</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>646F776E6C6F61645F66696C65</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>657865635F70757368</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>66765F616374696F6E</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Hmining.C</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>554889E54157415653504C8B7F484C8B7750488B5F584889DF{5}4C89FF4C89F64889DA{5}4889C74883C4085B415E415F5D</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>554889E5415741564154534189CE4889D34889DF{5}4889DF{5}4889CB4889C74889D64889DA4489F1{5}4989C64989D74989CC4889DF{5}4C89F74C89FE4C89E2{5}4889C75B415C415E415F5D</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Hmining.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4889C741FFD6488985E8FEFFFF0F57C00F298540FFFFFF0F298530FFFFFF0F298520FFFFFF0F298510FFFFFF*488D9510FFFFFF488D8D50FFFFFF41B8100000004889C741FFD648898508FFFFFF4885C0B800000000488985D8FEFFFF0F8444010000488B8520FFFFFF488B00488985F8FEFFFF</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4889DF*4989C44C8965B8*BA040000004C89F7*4889C7*488945C8*4889DF41FFD74C89F94885C07459*4531FF4531F64C8B6DC8418A45004330043C49FFC541FFC64D63F6488B7DC04889DE4989CC41FFD44939C64C0F446DC8B800000000440F44F049FFC7488B7DD04889DE41FFD44C89E14C8B65B84939C772B8488B45D04883C4285B415C415D415E415F5DC3</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Netwire.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>public.data</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.data</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>0304151A0D0A657869740D0A0D0A657869740A0A00</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.data</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>557365722D4167656E743A204D6F7A696C6C612F352E30202857696E646F7773204E5420362E333B20574F5736343B2054726964656E742F372E303B2072763A31312E3029206C696B65204765636B6F0D0A4163636570743A20746578742F68746D6C2C6170706C69636174696F6E2F7868746D6C2B786D6C2C6170706C69636174696F6E2F786D6C3B713D302E392C696D6167652F776562702C2A2F2A3B713D302E38</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Bundlore.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>5F5F4D415F41707044656C6567617465</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>5F5F4D415F446574656374656450726F647563747348616E646C6572</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>5F5F4D415F446D67536F75726365526561646572</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Eleanor.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>3mQnUelrjFN0TwMab36SnVMiYyE=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>H3guhN2/X9dkJvb5vz1CONLsmks=</data>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Hmining.A.2</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>616C6C436F6D70657469746F72734167656E7444656D6F6E64</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>637265617465416E644C6F61644167656E74506C697374506174683A6167656E74506C6973744E616D653A6167656E74506C6973744B65794172723A6167656E74506C69737456616C4172723A697341646D696E3A</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Trovi.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>726563656976696E675765627369746553746172746564</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>68746D6C496E6A6563746564</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Hmining.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>686964654F70657261746F725769646F77416674657241646D696E</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>488B8598FEFFFF4889442438488B8590FEFFFF4889442430488B8580FEFFFF488B8D88FEFFFF48894C24284889442420488B8500FFFFFF4889442418488B85F8FEFFFF4889442410488B85E8FEFFFF488B8DF0FEFFFF48894C240848890424</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Bundlore.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>5F5F6D6D5F676574496E6A6563746564506172616D73</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>5F5F6D6D5F72756E5368656C6C5363726970744173526F6F74</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Genieo.E</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>474E53696E676C65746F6E476C6F62616C43616C63756C61746F72</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>474E46616C6C6261636B5265706F727448616E646C6572</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.InstallCore.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>C645A065C645A152C645A24AC645A350C645A45BC645A557C645A672C645A748C645A853C645A95DC645AA25C645AB33C645AC42C645A053B801000000</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4989DF4889C3FFD34C89EFFFD3488B7DB0FFD3488B7DB8FFD34C89FFFFD34C8B6DC0488B7DA8</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>49434A617661536372697074456E7669726F6E6D656E74496E666F</string>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.KeRanger.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>488DBDD0EFFFFFBE00000000BA0004000031C04989D8*31F64C89E7*83F8FF7457C785C4EBFFFF00000000</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.CrossRider.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>E900000000488B8500FEFFFF8A08888D5FFEFFFF0FBE955FFEFFFF83C2D08955E0488BB560FEFFFF488BBD40FEFFFF</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.GenieoDropper.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>mxp.min.js</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>66756E6374696F6E204163636570744F666665727328297B</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>main.js</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>747261636B416E616C79746963734576656E742822657865637574696F6E222C224A7352756E22293B</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.InstallImitator.D</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>weccPSIDn1dSfFLUZ+BmEq9P3J8=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>zWhrlO037kR/HiY8vClYCwg9ZiY=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>FKqdMMpcmw+W0q6AZL8CxCeCPVs=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>DLTGBvPkIDgCug27AJ1gGAJm9Kw=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>jKF2ybXm+ulRkkfE+a+ds3lVRZ8=</data>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.XcodeGhost.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.data</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>8346002008903046*082108A800910021019101210296032203955346CDF810B0059406900120</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.data</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>8346002007902046*082107A8009100210DF10409032289E8320801214346059606900120</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.data</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>8346002007903046*082107A800910021019101210296032203955346CDF810B0059406900020</string>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.ExtensionsInstaller.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAll</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>72656D6F76655861747472546F</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>676574437279707465644461746146726F6D55726C</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>676574426573744F66666572436F6E6669673A61636365707465644F6666657273</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>536166617269457874656E73696F6E496E7374616C6C6572</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>546172436F6D70726573736F72</string>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Genieo.D</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4989C40F57C00F298580FEFFFF0F298570FEFFFF0F298560FEFFFF0F298550FEFFFF41B8100000004C89E7488BB540FEFFFF488D9550FEFFFF48</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>F20F59C1F20F5CD0F20F1155B80F28C2F20F1055D8F20F105DC8F20F58DAF20F59D1F20F5CDAF20F115DB00F28CB31FFBE0500000031D2</string>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Genieo.C</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>o+gnAx8UZkRCckme+FNIS6weuQs=</data>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Genieo.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>SVc12l+1grk9kP/yyLmW0l4hqjE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>AppDS</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>DhlsBne/b5RBEine/JRjndG2K3Y=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>AppS</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Vindinstaller.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>wEDu4PDQbWcsv8qU8sv8GXld2Y0=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>mac.installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.OpinionSpy.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-package-archive</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>oNC5008Hx9mYUrm4M7qPRyu1ZRY=</data>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Genieo.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>0HNBwIFz0OiF5sr9fVxQ694HsgU=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.InstallImitator.C</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>7qwSdeAY6IazKI2q57B4Qq7Ffv0=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.InstallImitator.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4989C64C89FF41FFD44889DF41FFD4488B7DC041FFD4488B7DA841FFD4488B5DB84889DF41FFD4488B7DB041FFD44889DF41FFD44C89F74883C4385B415C415D415E415F5D</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.InstallImitator.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>9YciNpookgB2IgJHoMTjNgdl8Lo=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>O34mmGfF4SI/UC053BTeMLHv3ak=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>DM</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>c01+N+xmSnYH5iMmVJy30wiO0CM=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>DownloadManager</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>6kWioiypoCwHu0sjZ+XWTqcxRzE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>mac-os-x-installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>+WRtx0M37iOowVnxlkGcRlGKgJU=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>mac-os-x-installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>zZuNqeAfPr8OE8Umo3L6ZUleN3g=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>DM</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>FrWatFCpwa2rJmrvz06PjPQFrJw=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>TIfeOqWpx5x/R3uqSiP7oOYtydg=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>TfU4f+crir4ONBASM0uJk/OZ02Y=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>ESWTgD</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.VSearch.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>bGrLF5sjLA8aa7J2mYCTIMwsFSk=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>zrsZ/uj9csCXXqmhn+6jtc5VX5Q=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>FQPx19J16XbNlM/XKSngQJ4M92o=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>xQrfqUmnCzPXcFDX8OL4a8y8Jc8=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>QDRrOUbXgk049bpxGB9cBoBSAK8=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Installer</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Machook.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>4rlXh4CuMY29uUmqwyp93mx32Rg=</data>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>u4y8Krko1m+h8X4C/yY0rTikd9Y=</data>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Machook.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>rj41+KxqKgmr2xfbzjh0uf2ae3s=</data>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.iWorm.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>wIAM1QlbKNpLbKAUaKJ5+1vmkho=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Install</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.iWorm.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-meta-package</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>XmhWnTJ3Kked+p5qI7LzrnSyAo8=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>postflight</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.iWorm.C</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-package-archive</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>XmhWnTJ3Kked+p5qI7LzrnSyAo8=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>postflight</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.NetWeird.ii</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>7RGa/CzGYumD/tJRfkTjIc9pXu4=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Host</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>twPgGR6rqkHhGIxqCY/tNpZHMuI=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>cracker</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.NetWeird.i</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>b3Re9Pn1IZhNhzgwAUjoP1DQGp0=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Host</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>VquuCGQiD8Vu3moSH95na1wi4uk=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Host</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.GetShell.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>ES1OeF42Or/sURVaVTbAcqDaSYY=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Adium</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.LaoShu.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>LiQzk6Tpl9U9PYBRZXGmTxAxMRY=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>worty</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Abk.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>PtsXeryJNP3H1Tf1EVu0+2q0HD8=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Abk</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.CoinThief.A</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>N8S8lPLAjpCkeCX+eyr7zpCLXXQ=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>.sig</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.CoinThief.B</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>wrgfcFZwyDfAv1ot3R45jpZ8Cgg=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>.sig</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
<dict>
<key>Identity</key>
<data>AuJDFX28iAOjZOlBClxBs23mTJU=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>.sig</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.CoinThief.C</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>1NFICmIzeCAlF8+G78TsJ/MjLw0=</data>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.RSPlug.A</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.bom</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4D6F7A696C6C61706C75672E706C7567696E00*5665726966696564446F776E6C6F6164506C7567696E00*5665726966696564446F776E6C6F6164506C7567696E2E7273726300</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Info.plist</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>3C6B65793E4946506B67466C616744656661756C744C6F636174696F6E3C2F6B65793E*3C737472696E673E2F4C6962726172792F496E7465726E657420506C75672D496E732F3C2F737472696E673E</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>preinstall</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>23212F62696E2F{-2}7368</string>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-package</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.Iservice.A</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>27666F72272073746570206D7573742062652061206E756D6265720025733A25753A206661696C656420617373657274696F6E20602573270A0000002F55736572732F6A61736F6E2F64696172726865612F6165732F6165735F6D6F6465732E63000000625F706F73203D3D2030000062616E0036392E39322E3137372E3134363A3539323031007177666F6A7A6C6B2E66726565686F737469612E636F6D3A31303234000000007374617274757000666600002C000000726F6F74000000002F62696E2F7368</string>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-package</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.Iservice.B</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>27666F72272073746570206D7573742062652061206E756D6265720025733A25753A206661696C656420617373657274696F6E20602573270A0000002F55736572732F6A61736F6E2F64696172726865612F6165732F6165735F6D6F6465732E63000000625F706F73203D3D2030000062616E0036392E39322E3137372E3134363A3539323031007177666F6A7A6C6B2E66726565686F737469612E636F6D3A31303234000000007374617274757000666600002C000000726F6F74000000002F62696E2F7368</string>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>A program</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.HellRTS</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>qNzMoqc0sjpk3utUxnQWEUZyMKg=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>rbframework.dylib</string>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.mach-o-dylib</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>eX17YAgTaOUMt9icXVHF0meoiog=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>RBShell.rbx_0.129.dylib</string>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.mach-o-dylib</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>656C6C5261697365722053657276657200165F44454255475F4C4F475F505249564154452E747874*5374617274536572766572203E20212053455256455220524553544152544544*2F7573722F62696E2F64656661756C7473207772697465206C6F67696E77696E646F77204175746F4C61756E636865644170706C69636174696F6E44696374696F6E617279202D61727261792D61646420273C646963743E3C6B65793E486964653C2F6B65793E3C00192F3E3C6B65793E506174683C2F6B65793E3C737472696E673E00113C2F737472696E673E3C2F646963743E27*48656C6C52616973657220536572766572</string>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>{dyn.*}</string>
<key>LSDownloadContentTypeKey</key>
<string>com.apple.mach-o-executable</string>
</dict>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.HellRTS</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>qK+o5ka9agLPqoRHNblMUIILufU=</data>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.application-file</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>C6WPVLRLLuih8Unhpobe7t67ebo=</data>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.application-file</string>
</dict>
</dict>
</array>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-file</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.OpinionSpy</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>504B010214000A0000000800547D8B3B9B0231BC{4}502D0700250000000000{12}636F6D2F697A666F7267652F697A7061636B2F70616E656C732F706F696E7374616C6C6572</string>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.sun.java-archive</string>
</dict>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>{(com.sun.java-archive|com.apple.application-bundle)}</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.MacDefender.A</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Info.plist</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>3C6B65793E434642756E646C654964656E7469666965723C2F6B65793E*3C737472696E673E636F6D2E41564D616B6572732E*2E706B673C2F737472696E673E</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.bom</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>436F6E74726F6C43656E746572442E6E6962*5669727573466F756E642E706E67*57616C6C65742E706E67*61666669642E747874</string>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-meta-package</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.MacDefender.B</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Info.plist</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>4946506B67466C6167417574686F72697A6174696F6E416374696F6E3C2F6B65793E0A093C737472696E673E4E6F417574686F72697A6174696F6E3C2F737472696E673E0A093C6B65793E4946506B67466C616744656661756C744C6F636174696F6E3C2F6B65793E0A093C737472696E673E2F4170706C69636174696F6E733C2F737472696E673E0A09</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>postinstall</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2F62696E2F7368*6F70656E202F4170706C69636174696F6E732F</string>
</dict>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.bom</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>436F6E74656E7473*496E666F2E706C697374*4D61634F53*5265736F7572636573*0000(0AF101134A4495|0B20012B644D93|0B1F01B1239428|0B1F0158C4CC11)000000000000000000000008446F776E6C6F6164506963742E706E6700000000</string>
</dict>
<dict>
<key>MatchType</key>
<string>MatchAll</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>A/ziWngj5jE5dSUGZo7t7a5NM7c=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Description.plist</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>Dc6s0ettJRWbv5QIv6C3XdDqwYE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.sizes</string>
</dict>
</dict>
</array>
</dict>
<dict>
<key>MatchType</key>
<string>MatchAll</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>EZHtIrPzp1eODO34mT9tZHpzArE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Description.plist</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>Dc6s0ettJRWbv5QIv6C3XdDqwYE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.sizes</string>
</dict>
</dict>
</array>
</dict>
<dict>
<key>MatchType</key>
<string>MatchAll</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>X9R+I746Ki3lJjmMU7wn68R5TmE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Description.plist</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>Dc6s0ettJRWbv5QIv6C3XdDqwYE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.sizes</string>
</dict>
</dict>
</array>
</dict>
<dict>
<key>MatchType</key>
<string>MatchAll</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>axtdeZu8dm9WTIOMlluvLKMVAt8=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Description.plist</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>Dc6s0ettJRWbv5QIv6C3XdDqwYE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.sizes</string>
</dict>
</dict>
</array>
</dict>
<dict>
<key>MatchType</key>
<string>MatchAll</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>frVwL3BuNwztkQ3TD3P+8+clwrs=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Description.plist</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>eBXEPt1DHW8KltqOFmNH827p+TI=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.sizes</string>
</dict>
</dict>
</array>
</dict>
<dict>
<key>MatchType</key>
<string>MatchAll</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>oXJzipG62llnEB6dPX7y98BYt1s=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Description.plist</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>Dc6s0ettJRWbv5QIv6C3XdDqwYE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.sizes</string>
</dict>
</dict>
</array>
</dict>
<dict>
<key>MatchType</key>
<string>MatchAll</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>s1ACH4D/bazTGlPYRG0h4zPmh5A=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Description.plist</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>Dc6s0ettJRWbv5QIv6C3XdDqwYE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.sizes</string>
</dict>
</dict>
</array>
</dict>
<dict>
<key>MatchType</key>
<string>MatchAll</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>64dqT9iT/VTaEFfYVPUEP2wUS2c=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Description.plist</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>NZYHDtwLrc+eKfSxFy8AzruGM5Y=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.sizes</string>
</dict>
</dict>
</array>
</dict>
<dict>
<key>MatchType</key>
<string>MatchAll</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>jPzhuB4DJCw23krUUPGZ9vTXaEE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Description.plist</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>Dc6s0ettJRWbv5QIv6C3XdDqwYE=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Archive.sizes</string>
</dict>
</dict>
</array>
</dict>
</array>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-package</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.QHost.WB.A</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Info.plist</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>3C6B65793E434642756E646C654964656E7469666965723C2F6B65793E0A093C737472696E673E636F6D2E466C617368506C617965722E666C617368706C617965722E706B673C2F737472696E673E*3C6B65793E4946506B67466C6167417574686F72697A6174696F6E416374696F6E3C2F6B65793E0A093C737472696E673E526F6F74417574686F72697A6174696F6E3C2F737472696E673E</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>preinstall</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>loQw8VAPxHW2UH88HVdXFMeFgBo=</data>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-package</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.Revir.A</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>YLDvA7ZdCOTqdTxjqT0mRn6blT4=</data>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>public.unix-executable</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.FlashBack.A</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>TMog/+ZBOjQXbaq5sHO81/eKArk=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>K2nXClXm7/yr5TFzNMCcg+jWFes=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>vV5UHuCuughPELEUlFnbeJhnfkA=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>Az3la6fU5RmIOFMMdcdXDNWZbag=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>qZ9lHNzvN2ZXJXbF2rWLpIwIGcA=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>baJv0gq7SBXFb2OJJNyCz2ymXK8=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>/9zY+0aX1MiFE7mcx0jnPPUPkYY=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>AmEHCVs2fXwSSe9601bs1hPr6BQ=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>AqNeLvPM31DQdVsntCwh6M6FfQk=</data>
</dict>
</array>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-package-archive</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.DevilRobber.A</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>504C4953545F4E414D453D2224484F4D452F4C6962726172792F4C61756E63684167656E74732F636F6D2E6170706C652E6C6567696F6E2E706C69737422*63686D6F64202B78202224484F4D452F244D41494E5F4449522F24455845435F4E414D4522*636F6D2E6170706C652E6C6567696F6E</string>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
<key>NSURLNameKey</key>
<string>preflight</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>3C6B65793E434642756E646C6545786563757461626C653C2F6B65793E*3C737472696E673E707265666C696768743C2F737472696E673E</string>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Info.plist</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>446961626C6F4D696E65722F7461726765742F446961626C6F4D696E65722E6A6172</string>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.zip-archive</string>
</dict>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.FlashBack.B</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>/XgQtEWKWDzKnGEL31pBgbrrIjM=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>cASuxrgZO4w+gDLXINwSGyO5Ibc=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>uHqU3dk/wDYhUFb7vtkjgO78rcI=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>200000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>P0DI2TvH0y08SO7azAzUEc8nPbo=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>300000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>4mbdhWAIhjcE3Zr3YIpYE32JNro=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>300000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>e21e3wSjV9Ej8tohnwx8CF/6Z/w=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>300000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>KESEsTAi6AmVa7ILa6dBvSwKcRc=</data>
</dict>
</array>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-package-archive</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.DevilRobber.B</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>455845435F4E414D453D*53485F4E414D453D*415243484956455F4E414D453D*504C4953545F4E414D453D2224484F4D452F4C6962726172792F4C61756E63684167656E74732F636F6D2E6170706C652E6D6F707065722E706C697374220A*63686D6F64202B78202224484F4D452F244D41494E5F4449522F24455845435F4E414D4522*63686D6F64202B78202224484F4D452F244D41494E5F4449522F645F73746172742E736822*3C737472696E673E636F6D2E6170706C652E6D6F707065723C2F737472696E673E</string>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>{(preflight)|(EvoCam*)}</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
</dict>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>645F73746172742E7368*645F73746F702E7368</string>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.data</string>
</dict>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.FlashBack.C</string>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>300000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>EvgU74JYyqK4S/djr4Mz5zi133Y=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>300000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>Ex2yZoTPoXpnX1/5pnqCzihkrJU=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>300000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>FA+6TK+io9/xKMXM7rEs4+hG+is=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>300000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>WF4eiqSGgLosTBWcakIvBaXKHlw=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>300000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>OStrEQzsGWAEYGHTfKA2jRx2nGU=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.installer-package-archive</string>
<key>NSURLFileSizeKey</key>
<integer>300000</integer>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>uVoqmhWmfB9N/OHz7o70Qp+GdHw=</data>
</dict>
</array>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-package-archive</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.FileSteal.ii</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>Identity</key>
<data>Hu3ehyzBRJKy5lcCKcD5vFSz8lg=</data>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>FileBackup</string>
</dict>
<key>MatchType</key>
<string>Match</string>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.FileSteal.i</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>FileBackup.ini</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>3C55524C3E*3C2F55524C3E*3C455854454E53494F4E3E*3C2F455854454E53494F4E3E</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
<key>NSURLNameKey</key>
<string>FileBackup</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>46696C654261636B757041707044656C6567617465*5461736B57726170706572*2F7573722F62696E2F6375726C*5A697055706C6F6164</string>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.Revir.ii</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
<key>NSURLFileSizeKey</key>
<integer>50000</integer>
<key>NSURLNameKey</key>
<string>FileAgent</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>IBluqsC/YMoRhKUXuItWS/gNZLI=</data>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.Mdropper.i</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>com.microsoft.word.doc</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>2F746D702F6C61756E63682D6873002F746D702F6C61756E63682D687365002F746D702F*0023212F62696E2F73680A2F746D702F6C61756E63682D68736520260A6F70656E202F746D702F66696C652E646F6320260A0A*00005F5F504147455A45524F00*005F5F6D685F657865637574655F686561646572</string>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.microsoft.word.doc</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.FkCodec.i</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>installer.plist</string>
<key>NSURLTypeIdentifierKey</key>
<string>com.apple.property-list</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>3C6B65793E6E616D653C2F6B65793E0A093C646963743E0A09093C6B65793E656E3C2F6B65793E0A09093C737472696E673E436F6465632D4D3C2F737472696E673E0A093C2F646963743E0A093C6B65793E76657273696F6E3C2F6B65793E</string>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Codec-M.tar</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.tar-archive</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Pattern</key>
<string>636F6D2E7768697465736D6F6B652E*7B45454637333633322D413038352D346664332D413737382D4543443832433843423239377D</string>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.MaControl.i</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
<key>NSURLFileSizeKey</key>
<integer>110000</integer>
<key>NSURLNameKey</key>
<string>iCnat</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>iob/gI0JDUACAaH5TY9wap2hFso=</data>
</dict>
</array>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
</dict>
<dict>
<key>Description</key>
<string>OSX.Revir.iii</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>FileAgent</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>Identity</key>
<data>Jl2v0JeMCzJUsawn2+21lZNyLS0=</data>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Revir.iv</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>FileAgent</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>Identity</key>
<data>eCMS23ZqQjN68wCTov01ju7Zf1M=</data>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.SMSSend.i</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>AutoExtract</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>Identity</key>
<data>bCtHOEIp66bzmMdKC6FRazpnRyM=</data>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.SMSSend.ii</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>AutoExtract</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>Identity</key>
<data>oH2El1GUBHKPQxruwc010378HLs=</data>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.eicar.com.i</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>eicar.com</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>M5WFbOgfK3OC3ucmAveYtkLxQUA=</data>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.AdPlugin.i</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Custom Installer</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>Identity</key>
<data>9jgFFI2F2LdXpQWAu6EeAsGSorg=</data>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.AdPlugin2.i</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.installer-package</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>Match</string>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>PackagePlugin</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>Identity</key>
<data>/lmjCeVok3TbpQvHNJ1iFI8auao=</data>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Leverage.a</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>UserEvent</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>QUSK/Le4V4ZqX2530+86OTWY+R4=</data>
</dict>
</array>
</dict>
<dict>
<key>Description</key>
<string>OSX.Prxl.2</string>
<key>LaunchServices</key>
<dict>
<key>LSItemContentType</key>
<string>com.apple.application-bundle</string>
</dict>
<key>Matches</key>
<array>
<dict>
<key>MatchType</key>
<string>MatchAny</string>
<key>Matches</key>
<array>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>Img2icns</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>7f8M0BEe4eOoXb0JYUhb4Umb22Y=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>AppDelete</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>Qp7WvO2bsYuV56W13pp7AjoqfSw=</data>
</dict>
<dict>
<key>MatchFile</key>
<dict>
<key>NSURLNameKey</key>
<string>CleanMyMac</string>
<key>NSURLTypeIdentifierKey</key>
<string>public.unix-executable</string>
</dict>
<key>MatchType</key>
<string>Match</string>
<key>Identity</key>
<data>8aMuU0OdOtyWejtH+Qcd5sEPzk4=</data>
</dict>
</array>
</dict>
</array>
</dict>
</array>
</plist>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment