zip

JSON
executablemacOS412.5 KBx86_64, arm64

System utility — executes operations with Apple-signed authorization

Apple-signed executable that performs system-level operations across x86_64 and arm64 architectures. Communicates with 7 network endpoints and manages interactions with one bundle identifier. Contains 146 functions handling core logic with 4 embedded URLs or endpoints and minimal private framework dependencies. Runs with the privileges granted by Apple's code signature.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
412.5 KB
UUID
CE13911C-ACE6-3615-840B-A2287728DCFF
Analyzed
2026-04-07T05:21:16Z
CDHash
452221fac16cdfb405e799af514b3418c056fd85bf5fff4b13c1e16b35dd09a0

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 146 functions identified

Functions(146)

0x1000006d8sub_1000006d8
0x1000009fcsub_1000009fc
0x100000bb4sub_100000bb4
0x100000bccsub_100000bcc
0x100000d0csub_100000d0c
0x100000e04sub_100000e04
0x100000efcsub_100000efc
0x100000f44sub_100000f44
0x100000fd0sub_100000fd0
0x100000fd8sub_100000fd8
0x100006324sub_100006324
0x100006450sub_100006450
0x100006554sub_100006554
0x1000065dcsub_1000065dc
0x100006770sub_100006770
0x1000067a4sub_1000067a4
0x100006950sub_100006950
0x100006becsub_100006bec
0x100006d18sub_100006d18
0x100006d98sub_100006d98

Imports94 symbols from 1 dylibs

Exports1

_mh_execute_header0x0