ffeval
executablemacOS51.0 KBarm64
Ad-hoc signed utility — executes a single primary function
This arm64 executable is signed with ad-hoc credentials and contains a single exported function. It references five file paths, suggesting filesystem operations or path manipulation. With minimal framework dependencies and a single function entry point, it likely serves as a specialized utility or command-line tool for a specific task rather than a system daemon or service.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- arm64
- Min OS
- 26.0.0
- SDK
- 26.1.0
- File Size
- 51.0 KB
- UUID
- 6B54D9E0-8864-35D7-A197-79017C07318A
- Analyzed
- 2026-04-09T08:42:57Z
- CDHash
- 0cc49c22380b2a514ce54fd13be624d33289d412e66b2516ecbc0995a1d4851e
Frameworks8
Interesting Strings
File Paths(5)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/CoreMedia.framework/Versions/A/CoreMedia/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices/System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo/System/Library/Frameworks/VideoToolbox.framework/Versions/A/VideoToolbox
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
0
Telemetry Strings
0
File Paths
5
Bundle IDs
0
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 1 functions identified
Functions(1)
0x1000026e0main
Imports18 symbols from 2 dylibs
Exports2
_mh_execute_header0x0
main0x26e0