diff3

JSON
executablemacOS132.2 KBx86_64, arm64

System utility — performs specialized administrative or monitoring function

This Apple-signed executable communicates with 6 network endpoints and references 4 URLs, suggesting it performs system administration, monitoring, or service integration tasks. It exposes a single bundle identifier for inter-process communication and contains 27 functions implementing its core logic. The binary runs with system-level privileges typical of Apple utilities and lacks private frameworks, relying on standard macOS APIs.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
132.2 KB
UUID
00CC1B97-700D-3548-AF95-36920F8BED51
Analyzed
2026-04-07T05:21:13Z
CDHash
b99a84ed39db1edcdcaa6d8124607acf18203bbed0c6a38c48bbe8a31d1e67a8

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 27 functions identified

Functions(27)

0x1000005d8sub_1000005d8
0x100000fe4sub_100000fe4
0x100001004sub_100001004
0x1000010acsub_1000010ac
0x1000011dcsub_1000011dc
0x100001368sub_100001368
0x10000142csub_10000142c
0x1000014dcsub_1000014dc
0x100001554sub_100001554
0x1000017c8sub_1000017c8
0x100001ac4sub_100001ac4
0x100001c40sub_100001c40
0x100001cf8sub_100001cf8
0x100001db8sub_100001db8
0x100001e70sub_100001e70
0x100001e88sub_100001e88
0x100001ee0sub_100001ee0
0x100001f28sub_100001f28
0x100001f44sub_100001f44
0x100001f60sub_100001f60

Imports32 symbols from 1 dylibs

Exports1

_mh_execute_header0x0