sysctl
executablemacOS116.5 KBx86_64, arm64
System service — connects to remote endpoints for configuration or telemetry
Apple-signed executable that initiates network connections to 6 remote endpoints, suggesting a system service for configuration delivery, telemetry collection, or service communication. Contains a single bundle identifier and references 4 URLs/endpoints in its strings, indicating deliberate network communication patterns. The lean function set (14 functions) and minimal framework usage suggest a focused utility rather than a complex application. Operates at system level with Apple's code signature.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 116.5 KB
- UUID
- 99B4B2B4-211B-38AF-BF39-4843C048DC7A
- Analyzed
- 2026-04-07T05:21:16Z
- CDHash
- 442fbc8db57c3b381649489320791aa7cbb47a7510fd1b628efdd255a961077a
Frameworks1
Interesting Strings
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 14 functions identified
Functions(14)
0x1000005d8sub_1000005d8
0x100000a4csub_100000a4c
0x100000ad4sub_100000ad4
0x100000cd0sub_100000cd0
0x10000148csub_10000148c
0x100001698sub_100001698
0x100002074sub_100002074
0x1000020f4sub_1000020f4
0x1000021ccsub_1000021cc
0x100002264sub_100002264
0x100002310sub_100002310
0x100002390sub_100002390
0x10000242csub_10000242c
0x100002448sub_100002448
Imports48 symbols from 1 dylibs
Exports1
_mh_execute_header0x0