cksum

JSON
executablemacOS115.4 KBx86_64, arm64

System service — communicates with Apple infrastructure endpoints

Signed Apple executable that establishes network connections to six distinct Apple infrastructure endpoints. Contains one bundle identifier and handles multiple URL-based communications. Runs as a system-level service with minimal external framework dependencies, suggesting a lean, focused operational scope. The presence of hardcoded network endpoints indicates it reports data or fetches configuration from Apple's servers.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
11.0.0
SDK
26.1.0
File Size
115.4 KB
UUID
2BCD17F3-4F76-3613-8067-1A42BC6789EE
Analyzed
2026-04-07T05:21:14Z
CDHash
084a28c2eb1044725cdc9c493c5f84949f36b01a1301c60057607326ab70cdec

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 9 functions identified

Functions(9)

0x100000638sub_100000638
0x10000075csub_10000075c
0x100000878sub_100000878
0x1000008dcsub_1000008dc
0x100000950sub_100000950
0x1000009c4sub_1000009c4
0x100000b10sub_100000b10
0x100000cb4sub_100000cb4
0x100000f3csub_100000f3c

Imports22 symbols from 1 dylibs

Exports1

_mh_execute_header0x0