printf

JSON
executablemacOS99.6 KBx86_64, arm64

System service — communicates with Apple remote endpoints for telemetry or updates

A signed Apple system executable that establishes connections to 6 remote network endpoints. Contains one bundle identifier and handles URLs or API endpoints embedded in its strings. Runs as a system process with minimal function count, suggesting focused responsibility for either telemetry collection, status reporting, or configuration retrieval from Apple servers. Uses only public frameworks, indicating standard system library dependencies.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
99.6 KB
UUID
1DA80D41-9A59-39A8-9CFF-EE34429DC51B
Analyzed
2026-04-07T05:21:16Z
CDHash
89020ae424f758422be1549c581d92b10864609ef9f02621c94cfe927bf4f494

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 8 functions identified

Functions(8)

0x1000005d8sub_1000005d8
0x100000820sub_100000820
0x1000009e8sub_1000009e8
0x100001340sub_100001340
0x1000013acsub_1000013ac
0x1000014dcsub_1000014dc
0x1000015a8sub_1000015a8
0x1000015f8sub_1000015f8

Imports27 symbols from 1 dylibs

Exports1

_mh_execute_header0x0