diff3
executablemacOS132.2 KBx86_64, arm64
System utility — performs specialized administrative or monitoring function
This Apple-signed executable communicates with 6 network endpoints and references 4 URLs, suggesting it performs system administration, monitoring, or service integration tasks. It exposes a single bundle identifier for inter-process communication and contains 27 functions implementing its core logic. The binary runs with system-level privileges typical of Apple utilities and lacks private frameworks, relying on standard macOS APIs.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 132.2 KB
- UUID
- 00CC1B97-700D-3548-AF95-36920F8BED51
- Analyzed
- 2026-04-07T05:21:13Z
- CDHash
- b99a84ed39db1edcdcaa6d8124607acf18203bbed0c6a38c48bbe8a31d1e67a8
Frameworks1
Interesting Strings
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 27 functions identified
Functions(27)
0x1000005d8sub_1000005d8
0x100000fe4sub_100000fe4
0x100001004sub_100001004
0x1000010acsub_1000010ac
0x1000011dcsub_1000011dc
0x100001368sub_100001368
0x10000142csub_10000142c
0x1000014dcsub_1000014dc
0x100001554sub_100001554
0x1000017c8sub_1000017c8
0x100001ac4sub_100001ac4
0x100001c40sub_100001c40
0x100001cf8sub_100001cf8
0x100001db8sub_100001db8
0x100001e70sub_100001e70
0x100001e88sub_100001e88
0x100001ee0sub_100001ee0
0x100001f28sub_100001f28
0x100001f44sub_100001f44
0x100001f60sub_100001f60
Imports32 symbols from 1 dylibs
Exports1
_mh_execute_header0x0