ncctl

JSON
executablemacOS132.1 KBx86_64, arm64

Network service — establishes and manages remote connections

Initiates outbound network connections to six remote endpoints, likely for service communication or data synchronization. Contains references to bundle identifiers and file paths, suggesting it operates as part of a larger system service ecosystem. Uses private Apple frameworks alongside standard system frameworks to manage network state and handle connection lifecycle. Signed by Apple and built for both Intel and ARM architectures.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
132.1 KB
UUID
B03EB9F4-F0A6-3B44-84DF-5ABFB9F1CEE0
Analyzed
2026-04-07T05:21:10Z
CDHash
76145a64d83eec75914f7e880407c81804659d3835c1fb70862b39961e2ec8df

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
1
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 12 functions identified

Functions(12)

0x1000005f0sub_1000005f0
0x1000006ccsub_1000006cc
0x1000007b8sub_1000007b8
0x100000938sub_100000938
0x100000a90sub_100000a90
0x100000c24sub_100000c24
0x100000e78sub_100000e78
0x100000f88sub_100000f88
0x100001004sub_100001004
0x100001280sub_100001280
0x10000129csub_10000129c
0x1000012b8sub_1000012b8

Imports32 symbols from 2 dylibs

Exports1

_mh_execute_header0x0