ditto

JSON
executablemacOS168.5 KBx86_64, arm64

Apple system service — manages background tasks and event scheduling

Handles scheduled event execution and background task coordination for macOS system services. Communicates with multiple Apple infrastructure endpoints to synchronize state, fetch configurations, and report activity status. Uses XPC services to interface with other system daemons and frameworks. Includes entitlements for elevated system access and uses private Apple frameworks for core functionality. Processes network requests to multiple endpoints suggesting cloud-backed operation and telemetry collection.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
168.5 KB
UUID
02E96738-C3FD-3690-9BA8-4743CFF12A37
Analyzed
2026-04-07T05:21:13Z
CDHash
62dbe96fdfba5726c61fba7fbe8dd116da05d537d695cc8bde165a2a4642bfd4

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
2
Bundle IDs
4
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 35 functions identified

Functions(35)

0x100000798sub_100000798
0x100001dbcsub_100001dbc
0x100001e9csub_100001e9c
0x100001f48sub_100001f48
0x100001f58sub_100001f58
0x100002050sub_100002050
0x10000210csub_10000210c
0x100002234sub_100002234
0x100002294sub_100002294
0x1000022f4sub_1000022f4
0x100002358sub_100002358
0x10000236csub_10000236c
0x100002778sub_100002778
0x1000029acsub_1000029ac
0x100002b84sub_100002b84
0x100002be4sub_100002be4
0x100002cb0sub_100002cb0
0x100002cf4sub_100002cf4
0x100002d1csub_100002d1c
0x100002d44sub_100002d44

Imports89 symbols from 3 dylibs

Exports1

_mh_execute_header0x0