tidy
executablemacOS117.9 KBx86_64, arm64
System service — manages signed Apple operations with telemetry reporting
Apple-signed executable that performs system-level functions with integrated telemetry capabilities. Communicates with 10 network endpoints to report diagnostics and operational data. Contains references to bundle identifiers and multiple telemetry collection points, indicating metrics gathering for Apple services. Implements 16 functional operations using 2 system frameworks.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 117.9 KB
- UUID
- 819B6A77-6B18-3780-A806-52BFF11AE7BF
- Analyzed
- 2026-04-07T05:21:13Z
- CDHash
- 616bb60d16d738fad1e31d13da47da3e594e429d29c707157f023ba0ff05d0f7
Frameworks2
Interesting Strings
Bundle IDs(1)
telemetry(2)
Network Surface
Endpoints(10)
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
6
Telemetry Strings
2
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 16 functions identified
Functions(16)
0x100000610sub_100000610
0x100001048sub_100001048
0x10000130csub_10000130c
0x10000143csub_10000143c
0x100001518sub_100001518
0x1000015e8sub_1000015e8
0x100001694sub_100001694
0x1000016ccsub_1000016cc
0x100001784sub_100001784
0x1000018d0sub_1000018d0
0x100001a20sub_100001a20
0x100001c7csub_100001c7c
0x100001ef8sub_100001ef8
0x100001f44sub_100001f44
0x100002144sub_100002144
0x1000022ccsub_1000022cc
Imports61 symbols from 2 dylibs
Exports1
_mh_execute_header0x0