mdls
executablemacOS133.2 KBx86_64, arm64
System service — communicates with Apple infrastructure endpoints
Executable signed by Apple that establishes network connections to multiple Apple-controlled endpoints. Contains minimal code surface with only two functions, suggesting it acts as a lightweight communicator or bootstrap agent rather than a full-featured service. Includes hardcoded file paths and URLs, indicating predefined communication patterns. The dual architecture support (x86_64 and arm64) enables execution across both Intel and Apple Silicon Macs. Network activity and endpoint connections should be monitored to understand its purpose within Apple's system infrastructure.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 133.2 KB
- UUID
- 42FC9D7B-7108-3D41-9ED2-1EB7196EDDC7
- Analyzed
- 2026-04-07T05:21:11Z
- CDHash
- 72b15317c1533e796c018d9268e2546574117c16dbd334c2fe0d8204d0e27b25
Interesting Strings
Bundle IDs(1)
File Paths(3)
Network Surface
Networking Frameworks
Endpoints(7)
API Usage
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
3
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 2 functions identified
Functions(2)
0x100000890sub_100000890
0x1000010c8sub_1000010c8
Imports38 symbols from 5 dylibs
Exports1
_mh_execute_header0x0