mdls

JSON
executablemacOS133.2 KBx86_64, arm64

System service — communicates with Apple infrastructure endpoints

Executable signed by Apple that establishes network connections to multiple Apple-controlled endpoints. Contains minimal code surface with only two functions, suggesting it acts as a lightweight communicator or bootstrap agent rather than a full-featured service. Includes hardcoded file paths and URLs, indicating predefined communication patterns. The dual architecture support (x86_64 and arm64) enables execution across both Intel and Apple Silicon Macs. Network activity and endpoint connections should be monitored to understand its purpose within Apple's system infrastructure.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
133.2 KB
UUID
42FC9D7B-7108-3D41-9ED2-1EB7196EDDC7
Analyzed
2026-04-07T05:21:11Z
CDHash
72b15317c1533e796c018d9268e2546574117c16dbd334c2fe0d8204d0e27b25

Interesting Strings

Network Surface

Networking Frameworks

API Usage

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
3
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 2 functions identified

Functions(2)

0x100000890sub_100000890
0x1000010c8sub_1000010c8

Imports38 symbols from 5 dylibs

Exports1

_mh_execute_header0x0