whois
executablemacOS132.1 KBx86_64, arm64
Apple system utility — manages signed configuration and network operations
Executes privileged system operations on behalf of Apple-signed processes. Handles network communications through 29 endpoints and processes bundle-specific identifiers to determine execution context. Contains nine core functions that likely manage configuration tasks, authentication, or system state changes. The minimal framework usage and focused function set indicate specialized handling of signed requests from other system components.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 132.1 KB
- UUID
- C810EA37-D4DA-3392-9DAB-E69770A3FBE5
- Analyzed
- 2026-04-07T05:21:12Z
- CDHash
- cee7e9caf9a176f0b3fa5d1988addee0485719ef70fbd1650d69f16b0633d4ed
Frameworks1
Interesting Strings
Network Surface
Endpoints(29)
Hostnamewhois.arin.net
Hostnamewhois.apnic.net
Hostnamewhois.abuse.net
Hostnamewhois.afrinic.net
Hostnamewhois.nic.gov
Hostnamewhois.internic.net
Hostnamewhois.iana.org
Hostnamewhois.krnic.net
Hostnamewhois.lacnic.net
Hostnamewhois.ra.net
Hostnamewhois.peeringdb.com
Hostnamewhois.ripe.net
Hostnamewhois-servers.net
Hostnameat.whois-servers.net
Hostnameno.whois-servers.net
Hostnameac.uk
Hostnameac.uk.whois-servers.net
Hostnamegov.uk
Hostnamewhois.denic.de
Hostnamede.whois-servers.net
Hostnamewhois.dk-hostmaster.dk
Hostnamedk.whois-servers.net
Hostnamewhois.verisign-grs.com
Hostnamewww.apple.com
Hostnamecrl.apple.com
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 9 functions identified
Functions(9)
0x1000005d8sub_1000005d8
0x10000092csub_10000092c
0x1000009d4sub_1000009d4
0x100000a0csub_100000a0c
0x100001394sub_100001394
0x1000013b0sub_1000013b0
0x1000013ccsub_1000013cc
0x1000013e8sub_1000013e8
0x100001404sub_100001404
Imports37 symbols from 1 dylibs
Exports1
_mh_execute_header0x0