cal

JSON
executablemacOS132.6 KBx86_64, arm64

System service — handles signed Apple functionality with network connectivity

Executes as a signed Apple executable with dual architecture support (x86_64 and arm64). Communicates with 7 network endpoints and processes 4 URLs or service endpoints, suggesting integration with Apple's backend services or cloud synchronization. Registers or interacts with at least one bundle identifier. Likely operates as a background system daemon managing Apple-specific features or data synchronization without direct user interaction.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
132.6 KB
UUID
561549CF-5F91-3912-91B0-18DE6691A17B
Analyzed
2026-04-07T05:21:14Z
CDHash
1d226db4fcdc391266e7e0dd348a0d4ed5e9e065f7e23a60def764a70abea8ee

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 30 functions identified

Functions(30)

0x100000678sub_100000678
0x100000730sub_100000730
0x100000794sub_100000794
0x100000884sub_100000884
0x10000091csub_10000091c
0x10000098csub_10000098c
0x100000ab0sub_100000ab0
0x100000b20sub_100000b20
0x100000cb4sub_100000cb4
0x100000cecsub_100000cec
0x100000d7csub_100000d7c
0x100000db4sub_100000db4
0x1000024c8sub_1000024c8
0x100002530sub_100002530
0x100002674sub_100002674
0x100002718sub_100002718
0x10000290csub_10000290c
0x1000029a8sub_1000029a8
0x1000029c0sub_1000029c0
0x1000029dcsub_1000029dc

Imports45 symbols from 2 dylibs

Exports1

_mh_execute_header0x0