enc_recon_frame_test

JSON
executablemacOS133.1 KBarm64

System utility — processes file paths and collects telemetry data

Executable that operates on file system paths and transmits telemetry information. Contains 9 functions that process file path strings and handle a single telemetry collection point. Ad-hoc signed with no developer signature, suggesting either a local build, test binary, or unsigned deployment. Relatively small footprint (133 KB) with minimal complexity, indicating a focused utility for specific file or diagnostic operations.AI

Fingerprint

Platform
macOS
Type
executable
Arch
arm64
Min OS
26.0.0
SDK
26.1.0
File Size
133.1 KB
UUID
01BBB5FC-D1C1-3B3D-88C5-6074D74B9DB4
Analyzed
2026-04-09T08:40:34Z
CDHash
a24fc57d2c4a2547937bfa3dec855e45f3de1af2d998f19d117aee101757877f

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
0
Telemetry Strings
1
File Paths
14
Bundle IDs
0
IOKit Constants
0
Library Functions
1

Structural HashesSHA-256

Static Libraries1 / 9 functions identified

Identified Libraries

Functions(9)

0x100014d20main
0x100015174process_frame
0x100015540frame_checksum_compare
0x10001555cframe_hash
0x1000156ccds_run
0x100015810decode_read
0x1000158e4ds_free
0x100015920ds_open
0x100015a44frame_hash.cold.1

Imports41 symbols from 6 dylibs

Exports5

_mh_execute_header0x0
ds_free0x158e4
ds_open0x15920
ds_run0x156cc
main0x14d20