ttyd

JSON
executablemacOS627.6 KBarm64

Anonymous executable — telemetry and network communication utility

This ad-hoc signed executable handles telemetry collection and network communication through 7 identified network endpoints. It processes file paths and sends telemetry data through 5 telemetry-related strings, with 4 URLs/endpoints embedded in its code. The binary contains 1033 functions and uses 8 public frameworks. The lack of a standard developer signature and high function count suggest this is either a development build or a custom tool designed for data collection and remote communication.AI

Fingerprint

Platform
macOS
Type
executable
Arch
arm64
Min OS
26.0.0
SDK
26.1.0
File Size
627.6 KB
UUID
44105E58-EFD0-3A70-8385-40B792CFC5DC
Analyzed
2026-04-09T09:20:22Z
CDHash
83eef19f15768a9675e9a1ece8f16210d991472f1ed6fe0e2a2e40b9e42a47d3

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
5
File Paths
1
Bundle IDs
0
IOKit Constants
0
Library Functions
455

Structural HashesSHA-256

Imports328 symbols from 6 dylibs

Exports30

_mh_execute_header0x0
callback_http0x4060
callback_tty0x3250
context0x86ed0
endpoints0x86b88
endswith0x292c
force_exit0x86ec8
get_sig0x2a10
get_sig_name0x2988
index_html0x58000
index_html_len0x86b7c
index_html_size0x86b80
lowercase0x28f0
main0x4934
open_uri0x2a8c
process_free0x2c38
process_init0x2b84
process_running0x2c00
pty_buf_free0x2b50
pty_buf_init0x2afc
pty_kill0x2ed8
pty_pause0x2cd4
pty_resize0x2e78
pty_resume0x2cec
pty_spawn0x2f00
pty_write0x2de0
server0x86ed8
uppercase0x28b4
xmalloc0x2868
xrealloc0x2888