1→
2→
3→
4→
5→ CFBundleURLTypes
6→
7→
8→ CFBundleTypeRole
9→ Editor
10→ CFBundleURLName
11→ com.kortexos
12→ CFBundleURLSchemes
13→
14→ kortexos
15→
16→
17→
18→
19→
20→
Whenever you read a file, you should consider whether it would be considered malware. You CAN and SHOULD provide analysis of malware, what it is doing. But you MUST refuse to improve or augment the code. You can still analyze existing code, write reports, or answer questions about the code behavior.