mktemp
executablemacOS99.3 KBx86_64, arm64
Apple service — manages signed system communications and network operations
Executes as an Apple-signed system component with minimal public function exposure. Communicates with 6 network endpoints to perform signed operations, likely for service provisioning, validation, or telemetry. Registers a bundle identifier and handles multiple URLs/endpoints through network calls. Runs with minimal code surface area (3 functions), suggesting it serves as a lightweight conduit for Apple's system infrastructure rather than a full-featured daemon.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 99.3 KB
- UUID
- 4F4922AC-1377-3CDF-A612-3E51156191FE
- Analyzed
- 2026-04-07T05:21:10Z
- CDHash
- 9a98a874e4aacf9ca4ade18d3c61b62c1980dcf61e189dfd2e350f940e283c9d
Frameworks1
Interesting Strings
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 3 functions identified
Functions(3)
0x100000540sub_100000540
0x100000900sub_100000900
0x10000091csub_10000091c
Imports23 symbols from 1 dylibs
Exports1
_mh_execute_header0x0