leave
executablemacOS98.9 KBx86_64, arm64
Unknown system executable — communicates with Apple network endpoints
A signed Apple executable that establishes connections to six network endpoints, suggesting a system utility or daemon with cloud communication capabilities. Contains minimal code surface (2 functions) and no private framework dependencies, indicating a lightweight tool with focused functionality. Includes one bundle identifier and four embedded URLs, likely directing traffic to Apple services or infrastructure. The sparse implementation and network-centric design suggest this binary handles a specific system task involving remote communication.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 98.9 KB
- UUID
- 3E28369D-3622-3A7D-804A-46540B967D2A
- Analyzed
- 2026-04-07T05:21:16Z
- CDHash
- 149ab30cfc9bd50557b2f655dcb4a408f7f2f22fda0e29fcea9a1dd91b0ae464
Frameworks1
Interesting Strings
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 2 functions identified
Functions(2)
0x100000500sub_100000500
0x1000006e8sub_1000006e8
Imports14 symbols from 1 dylibs
Exports1
_mh_execute_header0x0