Suspicious 80% Download

libSavageUpdater_iOS_static.a

Sparse strings, encoded payload

Very sparse string section (<0.2%)Encoded payload detected: url
SHA-2568f1b09999f5f9887e51c7bb60971b117f39187405ef77de1370e892804e16485
MaleculeO(As)Md

Evidence

Very sparse string section (<0.2%) 0x0–0x40
0x0cafebabe000000020100000c00000000................
0x10000000300004d9b8000000030100000c...0............
0x20800000020004d9e80004c62800000003...........(....
0x30213c617263683e0a23312f3230202020!<arch>.#1/20
0x40202020
Encoded payload detected: url 0x14bcc–0x14c0c
0x14bcc204d41585f4c454e5f4f435445545300 MAX_LEN_OCTETS.
0x14bdc596f6e6b65727349523a206677536967YonkersIR: fwSig
0x14bec4f6666736574203d203078253032582cOffset = 0x%02X,
0x14bfc206677536967456e6361704c656e203d fwSigEncapLen =
0x14c0c203078 0x

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.