leave

JSON
executablemacOS98.9 KBx86_64, arm64

Unknown system executable — communicates with Apple network endpoints

A signed Apple executable that establishes connections to six network endpoints, suggesting a system utility or daemon with cloud communication capabilities. Contains minimal code surface (2 functions) and no private framework dependencies, indicating a lightweight tool with focused functionality. Includes one bundle identifier and four embedded URLs, likely directing traffic to Apple services or infrastructure. The sparse implementation and network-centric design suggest this binary handles a specific system task involving remote communication.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
98.9 KB
UUID
3E28369D-3622-3A7D-804A-46540B967D2A
Analyzed
2026-04-07T05:21:16Z
CDHash
149ab30cfc9bd50557b2f655dcb4a408f7f2f22fda0e29fcea9a1dd91b0ae464

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 2 functions identified

Functions(2)

0x100000500sub_100000500
0x1000006e8sub_1000006e8

Imports14 symbols from 1 dylibs

Exports1

_mh_execute_header0x0