sysmond

JSON
executablemacOS171.6 KBx86_64, arm64

Hardware communication utility — performs direct device driver interaction and network operations

Executes direct hardware and driver-level communication with system devices. Establishes network connections to multiple endpoints, suggesting remote communication or data transmission capabilities. Exposes an XPC service for inter-process communication with other system components. References five bundle identifiers and multiple network endpoints, indicating integration with broader system services. Apple-signed binary with limited entitlements running at system level.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
171.6 KB
UUID
AABBBC2F-79C0-3362-AEB3-F19BF0D5E1DF
Analyzed
2026-04-09T10:07:42Z
CDHash
65b880448d7f5989dfbdd509ec35e2f08b2b5c0978bbfecca63d41cadf006cb1

Capabilities

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
2
Bundle IDs
5
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 80 functions identified

Functions(80)

0x100000be0sub_100000be0
0x100000be4sub_100000be4
0x100000cacsub_100000cac
0x100000e18sub_100000e18
0x100000ef8sub_100000ef8
0x100001188sub_100001188
0x100001330sub_100001330
0x100001388sub_100001388
0x100001420sub_100001420
0x1000016d8sub_1000016d8
0x100001748sub_100001748
0x10000179csub_10000179c
0x100001814sub_100001814
0x100001a28sub_100001a28
0x100001b14sub_100001b14
0x100001b98sub_100001b98
0x100001ba8sub_100001ba8
0x100001bb4sub_100001bb4
0x100001d6csub_100001d6c
0x100001e48sub_100001e48

Imports124 symbols from 7 dylibs

Exports1

_mh_execute_header0x0