mktemp

JSON
executablemacOS99.3 KBx86_64, arm64

Apple service — manages signed system communications and network operations

Executes as an Apple-signed system component with minimal public function exposure. Communicates with 6 network endpoints to perform signed operations, likely for service provisioning, validation, or telemetry. Registers a bundle identifier and handles multiple URLs/endpoints through network calls. Runs with minimal code surface area (3 functions), suggesting it serves as a lightweight conduit for Apple's system infrastructure rather than a full-featured daemon.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
99.3 KB
UUID
4F4922AC-1377-3CDF-A612-3E51156191FE
Analyzed
2026-04-07T05:21:10Z
CDHash
9a98a874e4aacf9ca4ade18d3c61b62c1980dcf61e189dfd2e350f940e283c9d

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 3 functions identified

Functions(3)

0x100000540sub_100000540
0x100000900sub_100000900
0x10000091csub_10000091c

Imports23 symbols from 1 dylibs

Exports1

_mh_execute_header0x0