To generate effective features for detecting (apps resigned and repackaged with iMazing, often for sideloading or piracy), you need to focus on forensic artifacts left by the iMazing signing/repackaging process .