last

JSON
executablemacOS116.6 KBx86_64, arm64

System utility — connects to Apple services and performs configuration tasks

Signed Apple executable that communicates with multiple network endpoints to retrieve or validate configuration data. Contains bundle identifiers and hardcoded URLs suggesting integration with Apple's infrastructure services. The minimal function count and small size indicate a focused utility rather than a general-purpose tool. Runs with whatever privileges the invoking process holds and logs activity through standard macOS mechanisms.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
116.6 KB
UUID
23BEF244-843B-366A-9A4A-F03D3655A3B1
Analyzed
2026-04-07T05:21:16Z
CDHash
a70df63b69e6346bf8c09663741c81d1e5c6d9f71bba594875ed9ba3ffb9c68a

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 6 functions identified

Functions(6)

0x1000005c0sub_1000005c0
0x100000b24sub_100000b24
0x100000b7csub_100000b7c
0x100000c58sub_100000c58
0x100000fe0sub_100000fe0
0x1000010a8sub_1000010a8

Imports46 symbols from 2 dylibs

Exports1

_mh_execute_header0x0