sftp-server

JSON
executablemacOS233.1 KBx86_64, arm64

System service — performs signed Apple operations with network communication

An Apple-signed executable that runs as a system service with connections to 9 network endpoints. Manages 8 bundle identifiers and interacts with 5 URLs or network services, suggesting coordination across multiple system components. Uses 11 public frameworks for its core functionality. The service handles operations across file paths and communicates with remote endpoints for system-level tasks.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
233.1 KB
UUID
9FB3F8A1-ADCC-390E-981B-8D6330FC5166
Analyzed
2026-04-09T10:04:03Z
CDHash
230f377416253c83bb5c8cedc1c5bd67bea87df38f84945f82a3ea7f06eefb68

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
5
Telemetry Strings
0
File Paths
8
Bundle IDs
8
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 121 functions identified

Functions(121)

0x1000009f0sub_1000009f0
0x100000a04sub_100000a04
0x100000a40sub_100000a40
0x100000bfcsub_100000bfc
0x100000cc0sub_100000cc0
0x100000eecsub_100000eec
0x1000012a8sub_1000012a8
0x1000012b8sub_1000012b8
0x10000134csub_10000134c
0x100001420sub_100001420
0x100002334sub_100002334
0x100002454sub_100002454
0x100002824sub_100002824
0x1000029a8sub_1000029a8
0x100002e0csub_100002e0c
0x100003188sub_100003188
0x100003190sub_100003190
0x10000333csub_10000333c
0x10000362csub_10000362c
0x100003958sub_100003958

Imports106 symbols from 2 dylibs

Exports1

_mh_execute_header0x0