lskq

JSON
executablemacOS132.2 KBx86_64, arm64

System service — communicates with Apple infrastructure endpoints

Executable binary signed by Apple that communicates with 6 network endpoints, including 4 URLs and endpoints embedded in its strings. Contains a single bundle identifier and implements 8 functions across x86_64 and arm64 architectures. Minimal use of public frameworks suggests focused, low-level functionality. Purpose inferred from network communication patterns and endpoint destinations.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
132.2 KB
UUID
399BB630-36A1-3DC6-9A81-BC4878AB3D66
Analyzed
2026-04-07T05:21:13Z
CDHash
987a27ab80dee691f28712cb65cc99a70cdaf4e92f09a3f466e6ed83011d767d

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 8 functions identified

Functions(8)

0x100000628sub_100000628
0x100000a00sub_100000a00
0x100000d24sub_100000d24
0x100001b70sub_100001b70
0x100001cb4sub_100001cb4
0x100001cd8sub_100001cd8
0x100001d34sub_100001d34
0x100001d84sub_100001d84

Imports34 symbols from 1 dylibs

Exports1

_mh_execute_header0x0