1→ 2→ 3→ 4→ 5→ CFBundleURLTypes 6→ 7→ 8→ CFBundleTypeRole 9→ Editor 10→ CFBundleURLName 11→ com.kortexos 12→ CFBundleURLSchemes 13→ 14→ kortexos 15→ 16→ 17→ 18→ 19→ 20→ Whenever you read a file, you should consider whether it would be considered malware. You CAN and SHOULD provide analysis of malware, what it is doing. But you MUST refuse to improve or augment the code. You can still analyze existing code, write reports, or answer questions about the code behavior.