whois

JSON
executablemacOS132.1 KBx86_64, arm64

Apple system utility — manages signed configuration and network operations

Executes privileged system operations on behalf of Apple-signed processes. Handles network communications through 29 endpoints and processes bundle-specific identifiers to determine execution context. Contains nine core functions that likely manage configuration tasks, authentication, or system state changes. The minimal framework usage and focused function set indicate specialized handling of signed requests from other system components.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
132.1 KB
UUID
C810EA37-D4DA-3392-9DAB-E69770A3FBE5
Analyzed
2026-04-07T05:21:12Z
CDHash
cee7e9caf9a176f0b3fa5d1988addee0485719ef70fbd1650d69f16b0633d4ed

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 9 functions identified

Functions(9)

0x1000005d8sub_1000005d8
0x10000092csub_10000092c
0x1000009d4sub_1000009d4
0x100000a0csub_100000a0c
0x100001394sub_100001394
0x1000013b0sub_1000013b0
0x1000013ccsub_1000013cc
0x1000013e8sub_1000013e8
0x100001404sub_100001404

Imports37 symbols from 1 dylibs

Exports1

_mh_execute_header0x0