msggrep

JSON
executablemacOS159.5 KBarm64

Unknown utility — processes files and communicates with remote endpoints

Executable that operates on local file paths and communicates with 4 network endpoints. Contains 183 functions distributed across 11 public frameworks. The binary is ad-hoc signed, indicating local development or non-Apple distribution. Limited string analysis reveals minimal hardcoded configuration, with actual functionality depending on runtime arguments and network responses. Security analysts should identify the specific endpoints being contacted and the file types being processed.AI

Fingerprint

Platform
macOS
Type
executable
Arch
arm64
Min OS
26.0.0
SDK
26.0.0
File Size
159.5 KB
UUID
49D8DAE6-171C-3608-AF6D-657223AE98F7
Analyzed
2026-04-09T09:10:17Z
CDHash
f67eaa2d4486664bc0456dd4b9143dc8e16acb208ad59f2dd82c7cae9af0495e

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
2
Telemetry Strings
0
File Paths
2
Bundle IDs
0
IOKit Constants
0
Library Functions
35

Structural HashesSHA-256

Static Libraries35 / 183 functions identified

Functions(183)

0x100003570main
0x100003d50no_pass
0x100003d8cusage
0x100004070process_msgdomain_list
0x1000040ecis_message_selected
0x10000412cis_message_selected_no_invert
0x100004738Fcompile
0x1000048b0Fexecute
0x100004bd0Ffree
0x100004bf8Gcompile
0x100004c10EGexecute
0x100004eb4EGfree
0x100004edcEcompile
0x100004ef4AWKcompile
0x100004f0ccompile
0x10000501cgl_dynarray_resize
0x1000050e4kwsalloc
0x1000051b0acexec
0x1000051b4kwsincr
0x100005580bmexec

Imports100 symbols from 5 dylibs

Exports28

_mh_execute_header0x0
gl_dynarray_resize0x501c
kwsalloc0x50e4
kwsexec0x5cac
kwsfree0x5cb4
kwsincr0x51b4
kwsprep0x55b8
kwswords0x55b0
main0x3570
matcher_awk0x1c048
matcher_egrep0x1c030
matcher_fgrep0x1c000
matcher_grep0x1c018
memchr20x63d8
rpl_nl_langinfo0x64bc
rpl_re_compile_fastmap0x7104
rpl_re_compile_pattern0x64e8
rpl_re_match0x7818
rpl_re_match_20x782c
rpl_re_search0xe4a8
rpl_re_search_20xe5a0
rpl_re_set_registers0x7860
rpl_re_set_syntax0x70ec
rpl_re_syntax_options0x1c178
rpl_regcomp0xcd48
rpl_regerror0x757c
rpl_regexec0x7724
rpl_regfree0xce38