sort

JSON
executablemacOS201.2 KBx86_64, arm64

System service — communicates with remote endpoints for configuration or telemetry

Apple-signed executable that establishes network connections to 6 remote endpoints, suggesting it performs communication with backend services. Contains 1 bundle identifier and references 4 URLs/endpoints, indicating it may handle configuration updates, telemetry reporting, or service discovery. Implements 153 functions across public frameworks. The presence of file path references and multiple network endpoints suggests it coordinates system state with remote infrastructure or retrieves policy/configuration data during operation.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
201.2 KB
UUID
24BD88F7-BFF1-3151-822F-B96B814EE264
Analyzed
2026-04-07T05:21:10Z
CDHash
458073b0e19610ac891254304f52f1b3835bd44a4ab13f3354a3d8bc12dc1166

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
1
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 153 functions identified

Functions(153)

0x100000678sub_100000678
0x100000874sub_100000874
0x1000008c4sub_1000008c4
0x1000008ccsub_1000008cc
0x1000008ecsub_1000008ec
0x100000914sub_100000914
0x100000978sub_100000978
0x1000009dcsub_1000009dc
0x100000ab0sub_100000ab0
0x100000c04sub_100000c04
0x100000c10sub_100000c10
0x100000cb8sub_100000cb8
0x100000e20sub_100000e20
0x100001098sub_100001098
0x100001110sub_100001110
0x100001164sub_100001164
0x1000011c0sub_1000011c0
0x100001424sub_100001424
0x100001578sub_100001578
0x100001690sub_100001690

Imports129 symbols from 1 dylibs

Exports1

_mh_execute_header0x0