true

JSON
executablemacOS82.2 KBx86_64, arm64

Apple system utility — communicates with remote services for system operations

A signed Apple executable that initiates outbound network connections to six distinct remote endpoints. Loads one framework and references multiple URLs and endpoints, suggesting coordination with Apple's cloud or backend services. The minimal function count and bundle ID indicate a focused utility for a specific system task. Network communication pattern and Apple signature suggest legitimate system integration rather than user-facing functionality.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
82.2 KB
UUID
0DC7587C-94B1-33CD-9B2B-48B098AF4CE9
Analyzed
2026-04-07T05:21:11Z
CDHash
9e804ecd5c2ba0096c44781a66a5f637b8a115391088899358528e7eee863ddf

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 1 functions identified

Functions(1)

0x100000368sub_100000368

Exports1

_mh_execute_header0x0