file

executablemacOS538.2 KBx86_64, arm64, arm64

System service — communicates with Apple endpoints for configuration and telemetry

Connects to 25 Apple network endpoints to transmit telemetry data and receive configuration updates. Handles multiple bundle identifiers and maintains communication through standard HTTP/HTTPS protocols. The binary includes URL and endpoint references indicating active network communication patterns. Operates as an Apple-signed system service with no user-facing interface.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 538.2 KB
UUID: 9B47DD0F-05E0-31D1-BED5-64EDFE0B98A4
Analyzed: 2026-04-07T05:21:11Z
CDHash: a2fa9af824516a99c3c73b3024763166e7f69adf209a3a1ca75ab9831994d41d

Frameworks4

libbz2.1.0.dylib libz.1.dylib liblzma.5.dylib libSystem.B.dylib

Interesting Strings

Bundle IDs(2)

/AppleInternal/Library/BuildRoots/4~B_wJugCW8zy89m6GP1Sfwju9ZcSp6kc80rGr-Qg/Library/Caches/com.apple.xbs/Sources/file/file/src/softmagic.c com.apple.file

File Paths(2)

/AppleInternal/Library/BuildRoots/4~B_wJugCW8zy89m6GP1Sfwju9ZcSp6kc80rGr-Qg/Library/Caches/com.apple.xbs/Sources/file/file/src/softmagic.c Microsoft Thumbs.db [

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">Report bugs to https://bugs.astron.com/https://www.apple.com/appleca/0

Network Surface

Endpoints(25)

Urlhttps://bugs.astron.com/

Hostnamebugs.astron.com

Urlhttp://www.apple.com/appleca/root.crl0

Hostnamewww.apple.com

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

0

File Paths

2

Bundle IDs

2

IOKit Constants

0

Library Functions

51

Structural HashesSHA-256

Codee1dc8834a7435c066911a6e94c979ed2097472a7210bd406897a06be26acb76b

Imports0c6e17713e3614f054c893cdbf508328204f7e588af670b539118b57b6e999b4

Frameworks925214256fbad261d38a08bf05e40efb96e0d6332469c396e7175406076bab6e

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbols0c6e17713e3614f054c893cdbf508328204f7e588af670b539118b57b6e999b4

Static Libraries51 / 203 functions identified

Identified Libraries

FLAC 1.5.0 (12 fn)SDL2 2.32.10 (13 fn)SDL2_test 2.32.10 (1 fn)X11 1.8.12 (2 fn)Xext 1.3.6 (1 fn)aom 3.13.1 (6 fn)ass 0.17.4 (1 fn)avcodec 8.0.1 (1 fn)boost_log 1.89.0 (1 fn)boost_python313 1.89.0 (1 fn)boost_wserialization 1.89.0 (1 fn)crypto 3.6.1 (3 fn)gio-2.0 2.86.3 (2 fn)harfbuzz 12.3.0 (1 fn)jpeg 3.1.3 (2 fn)ldns 1.9.0 (1 fn)ssh 0.11.3 (1 fn)zmq 4.3.5_2 (1 fn)

Functions(203)

0x1000006d0sub_1000006d0

0x100000720sub_100000720

0x100000768sub_100000768

0x10000082csub_10000082c

0x1000008a0sub_1000008a0

0x100000920sub_100000920

0x100000f2csub_100000f2c

0x100000fb4sub_100000fb4

0x1000010e8sub_1000010e8

0x100001190sub_100001190

0x100001210sub_100001210

0x1000012d8sub_1000012d8

0x1000013c8sub_1000013c8

0x1000013f4sub_1000013f4

0x1000014b4sub_1000014b4

0x100001c70sub_100001c70

0x100001db4sub_100001db4

0x100001dc0sub_100001dc0

0x100003c90sub_100003c90

0x100003cd0sub_100003cd0

Imports135 symbols from 4 dylibs

libSystem.B.dylib124 libz.1.dylib5 libbz2.1.0.dylib3 liblzma.5.dylib3

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable