killall

JSON
executablemacOS116.3 KBx86_64, arm64

System utility — connects to Apple services for configuration or data synchronization

Executable signed by Apple that communicates with multiple network endpoints, likely for system updates, device registration, or service configuration. Contains logic to identify bundle identifiers and interacts with four distinct URLs or endpoints. Built as a universal binary for both Intel and Apple Silicon architectures. Operates with minimal framework dependencies, suggesting lightweight background operation rather than complex system integration.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
116.3 KB
UUID
D29F2CD0-D2E9-31FA-A279-06C998339913
Analyzed
2026-04-07T05:21:13Z
CDHash
c6c8880e3583fe9269559d9909a034920df9bacabe0712ff5557c5748d3131fb

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 5 functions identified

Functions(5)

0x1000004f0sub_1000004f0
0x100000714sub_100000714
0x10000077csub_10000077c
0x1000007b4sub_1000007b4
0x1000011b0sub_1000011b0

Imports43 symbols from 1 dylibs

Exports1

_mh_execute_header0x0