true
executablemacOS82.2 KBx86_64, arm64
Apple system utility — communicates with remote services for system operations
A signed Apple executable that initiates outbound network connections to six distinct remote endpoints. Loads one framework and references multiple URLs and endpoints, suggesting coordination with Apple's cloud or backend services. The minimal function count and bundle ID indicate a focused utility for a specific system task. Network communication pattern and Apple signature suggest legitimate system integration rather than user-facing functionality.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 82.2 KB
- UUID
- 0DC7587C-94B1-33CD-9B2B-48B098AF4CE9
- Analyzed
- 2026-04-07T05:21:11Z
- CDHash
- 9e804ecd5c2ba0096c44781a66a5f637b8a115391088899358528e7eee863ddf
Frameworks1
Interesting Strings
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 1 functions identified
Functions(1)
0x100000368sub_100000368
Exports1
_mh_execute_header0x0