DeRez
executablemacOS116.1 KBx86_64, arm64
System service component — manages Apple system functionality via network communication
Apple-signed executable that communicates with 7 network endpoints, likely for system service registration, updates, or telemetry. Contains 6 bundle identifiers and references 5 URLs/endpoints, suggesting coordination with multiple Apple services. Minimal exported functions indicate this runs as a background component rather than a standalone utility. Uses standard frameworks for network connectivity and system integration.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 116.1 KB
- UUID
- B9C0EA6B-DC11-3436-82D5-61995EE5342F
- Analyzed
- 2026-04-07T05:21:12Z
- CDHash
- faf2ff926a5e8a450c9f496c87f4df5096564c82210295d82fc2c8b2cef095d6
Frameworks2
Interesting Strings
Bundle IDs(6)
*com.apple.dt.xcode_select.tool-shim-public/AppleInternal/Library/BuildRoots/4~B_wqugBHzFFcIP-pAxo4IDm9CBUtDV28t-tQSx8/Library/Caches/com.apple.xbs/Binaries/xcode_select/install/TempContent/Objects/xcode_select.build/tool-shim-public.build/Objects-normal/arm64e/tool-shim.o/AppleInternal/Library/BuildRoots/4~B_wqugBHzFFcIP-pAxo4IDm9CBUtDV28t-tQSx8/Library/Caches/com.apple.xbs/Sources/xcode_select/src/shims/<string>com.apple.compilers.llvm.clang.1_0</string><string>com.apple.dt.xcode_select.tool-shim-public</string>
File Paths(2)
/AppleInternal/Library/BuildRoots/4~B_wqugBHzFFcIP-pAxo4IDm9CBUtDV28t-tQSx8/Library/Caches/com.apple.xbs/Binaries/xcode_select/install/TempContent/Objects/xcode_select.build/tool-shim-public.build/Objects-normal/arm64e/tool-shim.o/AppleInternal/Library/BuildRoots/4~B_wqugBHzFFcIP-pAxo4IDm9CBUtDV28t-tQSx8/Library/Caches/com.apple.xbs/Sources/xcode_select/src/shims/
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
0
File Paths
2
Bundle IDs
6
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 2 functions identified
Functions(2)
0x1000006c0main
0x100000790sub_100000790
Imports12 symbols from 2 dylibs
Exports1
_mh_execute_header0x0