what

JSON
executablemacOS98.8 KBx86_64, arm64

System service — communicates with Apple backend services

Connects to multiple Apple network endpoints to exchange data with backend services. Operates as a signed system component with minimal local functionality. Includes embedded bundle identifiers and network endpoints suggesting integration with Apple's infrastructure for telemetry, configuration, or service provisioning.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
98.8 KB
UUID
07BB94DE-FB71-34B8-8C4F-6EA3B6E0A1ED
Analyzed
2026-04-07T05:21:10Z
CDHash
5cc606a7f1e96a401daa9e532da903fcca44543a384a81afba055d4de193588e

Interesting Strings

Bundle IDs(1)

com.apple.what

Network Surface

Endpoints(6)

Urlhttp://www.apple.com/appleca/root.crl0
Hostnamewww.apple.com
Urlhttp://crl.apple.com/codesigning.crl0
Hostnamecrl.apple.com
Urlhttps://www.apple.com/appleca/0
Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Code6d8097c1fc716ac8249095577b949cc108716206d748e395f85a9ef0fa81e1dc
Imports26a91dc14f2d37750d9b96c0fb2ca10f0ba2408f8c39244a2edd4520b074588c
Frameworksb97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed
Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Symbols26a91dc14f2d37750d9b96c0fb2ca10f0ba2408f8c39244a2edd4520b074588c

Static Libraries0 / 2 functions identified

Functions(2)

0x1000004f0sub_1000004f0
0x100000678sub_100000678

Imports12 symbols from 1 dylibs

libSystem.B.dylib12

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

rev
68.5%
locate.code
64.0%
paste
61.7%
mesg
61.5%
tab2space
61.2%
tsort
60.7%
colrm
60.6%
printenv
60.0%
repquota
59.5%
tee
59.4%