nohup
executablemacOS99.1 KBx86_64, arm64
Apple system component — manages security or service configuration
A signed Apple executable that communicates with remote endpoints for system operations. Interacts with one bundle identifier and makes network requests to six distinct endpoints. Contains minimal exported functions, suggesting it operates as a background agent or plugin that responds to system events or inter-process communication rather than exposing a public API. The restricted function surface and network communication pattern indicate it handles specialized system tasks like security updates, service validation, or configuration synchronization.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 99.1 KB
- UUID
- B0903E82-8848-3173-9840-A72B213B22A8
- Analyzed
- 2026-04-07T05:21:13Z
- CDHash
- 88d6d12821b03fd5f186d08c65dad78217fe0415d6ac890c1ea0dd0659145672
Frameworks1
Interesting Strings
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 1 functions identified
Functions(1)
0x1000004f0sub_1000004f0
Imports18 symbols from 1 dylibs
Exports1
_mh_execute_header0x0