LM Studio

executablemacOS67.9 KBarm64

Background service — communicates with remote endpoints and manages bundle identifiers

Runs as a background executable that connects to 10 network endpoints, likely for remote communication or configuration management. Tracks or references 6 bundle identifiers, suggesting interaction with multiple applications or system services. Uses 3 entitlements to obtain necessary permissions for its operations. Makes outbound HTTP/HTTPS requests to 7 URLs and endpoints, indicating it pulls data from or reports to remote servers. The unknown signing status and generic architecture warrant verification of origin before deployment.AI

Fingerprint

Platform: macOS
Type: executable
Arch: arm64
Min OS: 11.0.0
SDK: 14.0.0
File Size: 67.9 KB
UUID: 4C4C44F8-5555-3144-A177-FBEC4CFFD889
Analyzed: 2026-04-09T08:25:19Z
Team ID: D65G88RHWN
CDHash: ca31b2170e29d80ed5a5119408d1d791eb78832f0c10fb8d3e46461cac278006

Frameworks2

Electron Framework libSystem.B.dylib

Entitlements3

com.apple.security.cs.allow-dyld-environment-variablestrue

com.apple.security.cs.allow-jittrue

com.apple.security.cs.allow-unsigned-executable-memorytrue

Interesting Strings

Bundle IDs(6)

<key>com.apple.security.cs.allow-dyld-environment-variables</key> <key>com.apple.security.cs.allow-jit</key> <key>com.apple.security.cs.allow-unsigned-executable-memory</key>6com.apple.security.cs.allow-dyld-environment-variables 6com.apple.security.cs.allow-unsigned-executable-memory

URLs & Endpoints(7)

"http://crl.apple.com/timestamp.crl0 $http://ocsp.apple.com/ocsp03-devid060 *http://www.apple.com/certificateauthority/0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">http://crl.apple.com/root.crl0

Network Surface

Endpoints(10)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://crl.apple.com/root.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

Urlhttp://ocsp.apple.com/ocsp03-devid060

Hostnameocsp.apple.com

Urlhttp://www.apple.com/certificateauthority/0

Urlhttp://www.apple.com/appleca0

Urlhttp://crl.apple.com/timestamp.crl0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

7

Telemetry Strings

0

File Paths

0

Bundle IDs

6

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code5cdc825e416e5f1ee1e6441d7d9dfafd998f199e9649de0ae326b225c2767daf

Imports44b065c1c497ea402682961b395d1dd554ebcb5b0c1c4213e4131b860e4418d6

Frameworks24e4a343ed1bc0c2c7aeb5829ee3cbea6eb4969e6609cd6c98d5c495e9f35fa3

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements8de15795f778e3b3bc66d8440d74ee446c7bc3a17f448f6dd1259d78c7432937

Symbols44b065c1c497ea402682961b395d1dd554ebcb5b0c1c4213e4131b860e4418d6

Static Libraries0 / 3 functions identified

Functions(3)

0x1000005acsub_1000005ac

0x100000608sub_100000608

0x10000060csub_10000060c

Imports11 symbols from 2 dylibs

libSystem.B.dylib8 Electron Framework3

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable