zip
executablemacOS412.5 KBx86_64, arm64
System utility — executes operations with Apple-signed authorization
Apple-signed executable that performs system-level operations across x86_64 and arm64 architectures. Communicates with 7 network endpoints and manages interactions with one bundle identifier. Contains 146 functions handling core logic with 4 embedded URLs or endpoints and minimal private framework dependencies. Runs with the privileges granted by Apple's code signature.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 412.5 KB
- UUID
- CE13911C-ACE6-3615-840B-A2287728DCFF
- Analyzed
- 2026-04-07T05:21:16Z
- CDHash
- 452221fac16cdfb405e799af514b3418c056fd85bf5fff4b13c1e16b35dd09a0
Frameworks1
Interesting Strings
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 146 functions identified
Functions(146)
0x1000006d8sub_1000006d8
0x1000009fcsub_1000009fc
0x100000bb4sub_100000bb4
0x100000bccsub_100000bcc
0x100000d0csub_100000d0c
0x100000e04sub_100000e04
0x100000efcsub_100000efc
0x100000f44sub_100000f44
0x100000fd0sub_100000fd0
0x100000fd8sub_100000fd8
0x100006324sub_100006324
0x100006450sub_100006450
0x100006554sub_100006554
0x1000065dcsub_1000065dc
0x100006770sub_100006770
0x1000067a4sub_1000067a4
0x100006950sub_100006950
0x100006becsub_100006bec
0x100006d18sub_100006d18
0x100006d98sub_100006d98
Imports94 symbols from 1 dylibs
Exports1
_mh_execute_header0x0