nslookup

executablemacOS4.0 MBx86_64, arm64

System hardware monitoring daemon — captures and reports hardware metrics and diagnostics

Interfaces directly with hardware and drivers to collect system diagnostics including CPU, memory, thermal, and power metrics. Transmits telemetry and diagnostic data to Apple endpoints for system health analysis and product improvement. Manages 35 network endpoints and interacts with multiple system frameworks to monitor hardware state and performance characteristics. Operates as a signed Apple daemon with no direct user interface.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 4.0 MB
UUID: 0ED6FC47-B097-3837-A388-E07B2CE411BB
Analyzed: 2026-04-09T09:32:07Z
CDHash: 4edce7ccdd5e3f9e06c64a85f85d386445c778497b096e487bb6acbda427b4eb

Capabilities

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

Frameworks5

IOKit CoreFoundation libedit.3.dylib Kerberos libSystem.B.dylib

Interesting Strings

Bundle IDs(223)

/AppleInternal/Library/BuildRoots/4~B_wQugB79MmLoReDYQD47ixq1cWsroW1nQVzrcw/Library/Caches/com.apple.xbs/Sources/bind9/bind9/bin/dig/dighost.c /AppleInternal/Library/BuildRoots/4~B_wQugB79MmLoReDYQD47ixq1cWsroW1nQVzrcw/Library/Caches/com.apple.xbs/Sources/bind9/bind9/bin/dig/nslookup.c /AppleInternal/Library/BuildRoots/4~B_wQugB79MmLoReDYQD47ixq1cWsroW1nQVzrcw/Library/Caches/com.apple.xbs/Sources/bind9/bind9/lib/bind9/getaddresses.c /AppleInternal/Library/BuildRoots/4~B_wQugB79MmLoReDYQD47ixq1cWsroW1nQVzrcw/Library/Caches/com.apple.xbs/Sources/bind9/bind9/lib/dns/acache.c /AppleInternal/Library/BuildRoots/4~B_wQugB79MmLoReDYQD47ixq1cWsroW1nQVzrcw/Library/Caches/com.apple.xbs/Sources/bind9/bind9/lib/dns/acl.c

File Paths(225)

/AppleInternal/Library/BuildRoots/4~B_wQugB79MmLoReDYQD47ixq1cWsroW1nQVzrcw/Library/Caches/com.apple.xbs/Sources/bind9/bind9/bin/dig/dighost.c /AppleInternal/Library/BuildRoots/4~B_wQugB79MmLoReDYQD47ixq1cWsroW1nQVzrcw/Library/Caches/com.apple.xbs/Sources/bind9/bind9/bin/dig/nslookup.c /AppleInternal/Library/BuildRoots/4~B_wQugB79MmLoReDYQD47ixq1cWsroW1nQVzrcw/Library/Caches/com.apple.xbs/Sources/bind9/bind9/lib/bind9/getaddresses.c /AppleInternal/Library/BuildRoots/4~B_wQugB79MmLoReDYQD47ixq1cWsroW1nQVzrcw/Library/Caches/com.apple.xbs/Sources/bind9/bind9/lib/dns/acache.c /AppleInternal/Library/BuildRoots/4~B_wQugB79MmLoReDYQD47ixq1cWsroW1nQVzrcw/Library/Caches/com.apple.xbs/Sources/bind9/bind9/lib/dns/acl.c

telemetry(2)

resubmitted recv request with length %d, recvcount=%d trust-anchor-telemetry

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

Endpoints(35)

Hostnameu.in-addr.arpa

Hostnameip6.int

Hostnamelu.IN-ADDR.ARPA

Hostnamelx2.0.0.2.IP6.ARPA

Ipv62001:503:BA3E

Ipv4192.228.79.201

Ipv62001:500:200

Ipv4192.33.4.12

Ipv4199.7.91.13

Ipv62001:500:2d

Ipv4192.203.230.10

Ipv62001:500:a8

Ipv4192.5.5.241

Ipv62001:500:2F

Ipv4192.112.36.4

Ipv62001:500:12

Ipv4198.97.190.53

Ipv4192.36.148.17

Ipv4192.58.128.30

Ipv62001:503:C27

Ipv4193.0.14.129

Ipv4199.7.83.42

Ipv62001:500:9f

Ipv4202.12.27.33

Urlhttp://www.apple.com/appleca/root.crl0

Hostnamewww.apple.com

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

1

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

2

File Paths

225

Bundle IDs

223

IOKit Constants

0

Library Functions

3

Structural HashesSHA-256

Code224133397270f7b94f0a2b2a8c4c776fbd209760b398016ff0aae23524fd7095

Imports2e64a11d58683be975c99ad7b5ee65835aa58a710363c8bbc1ccba5ccd2c4d40

Frameworks57d721a231c9e719bfc19f6169e05ba88c65c4075afec3c12a2602c22686128c

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbols2e64a11d58683be975c99ad7b5ee65835aa58a710363c8bbc1ccba5ccd2c4d40

Static Libraries3 / 14820 functions identified

Identified Libraries

freetype 2.14.1_1 (2 fn)x265 4.1 (1 fn)

Functions(14820)

0x100000838sub_100000838

0x100000c20sub_100000c20

0x100000c24sub_100000c24

0x100000c28sub_100000c28

0x100000e44sub_100000e44

0x100001034sub_100001034

0x10000122csub_10000122c

0x100001474sub_100001474

0x100001734sub_100001734

0x10000187csub_10000187c

0x100001980sub_100001980

0x100001998sub_100001998

0x100001f80sub_100001f80

0x100002194sub_100002194

0x100002414sub_100002414

0x100002478sub_100002478

0x1000024dcsub_1000024dc

0x100002528sub_100002528

0x100002574sub_100002574

0x1000025c0sub_1000025c0

Imports204 symbols from 3 dylibs

libSystem.B.dylib184 Kerberos18 libedit.3.dylib2

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

update_mcdp29xx