nohup

JSON
executablemacOS99.1 KBx86_64, arm64

Apple system component — manages security or service configuration

A signed Apple executable that communicates with remote endpoints for system operations. Interacts with one bundle identifier and makes network requests to six distinct endpoints. Contains minimal exported functions, suggesting it operates as a background agent or plugin that responds to system events or inter-process communication rather than exposing a public API. The restricted function surface and network communication pattern indicate it handles specialized system tasks like security updates, service validation, or configuration synchronization.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
99.1 KB
UUID
B0903E82-8848-3173-9840-A72B213B22A8
Analyzed
2026-04-07T05:21:13Z
CDHash
88d6d12821b03fd5f186d08c65dad78217fe0415d6ac890c1ea0dd0659145672

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 1 functions identified

Functions(1)

0x1000004f0sub_1000004f0

Imports18 symbols from 1 dylibs

Exports1

_mh_execute_header0x0