talk

JSON
executablemacOS134.9 KBx86_64, arm64

System utility — communicates with remote endpoints for data processing or service management

A signed Apple executable that initiates network connections to six remote endpoints, likely for system configuration, telemetry, or service communication. Contains one bundle identifier and multiple URL references embedded in its strings. Compiled for both Intel and Apple silicon architectures. The lightweight function count (37) and modest binary size suggest focused, specialized functionality rather than a complex daemon. Security analysts should identify the specific endpoints contacted and bundle identifier to determine if this participates in legitimate system operations or data collection.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
134.9 KB
UUID
F533E068-B119-3C22-AC3A-FDEFFAA3AFCC
Analyzed
2026-04-07T05:21:15Z
CDHash
578af2b7700cb9e0d20f635b68bc831e7b3de9aaabda7989cd3161a7c727dc0f

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 37 functions identified

Functions(37)

0x100000708sub_100000708
0x100000714sub_100000714
0x100000780sub_100000780
0x1000007ccsub_1000007cc
0x100000ac8sub_100000ac8
0x100000b40sub_100000b40
0x100000bbcsub_100000bbc
0x100000c6csub_100000c6c
0x100000eecsub_100000eec
0x100000f80sub_100000f80
0x100001048sub_100001048
0x1000011dcsub_1000011dc
0x1000012a8sub_1000012a8
0x100001494sub_100001494
0x100001504sub_100001504
0x100001694sub_100001694
0x1000017f4sub_1000017f4
0x100001870sub_100001870
0x100001a3csub_100001a3c
0x100001a58sub_100001a58

Imports90 symbols from 2 dylibs

Exports1

_mh_execute_header0x0