diffstat

JSON
executablemacOS165.5 KBx86_64, arm64

Apple system service — communicates with Apple servers for device management or services

This Apple-signed executable initiates outbound connections to seven network endpoints, likely for device telemetry, configuration retrieval, or service activation. It registers at least one bundle identifier and handles multiple URLs, suggesting it participates in Apple's cloud infrastructure. The compact code footprint indicates a focused daemon role. Network connectivity and use of Apple endpoints warrant monitoring if baseline behavior changes.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
165.5 KB
UUID
59F332C0-1DAD-3179-A6C5-1D88F1B0FD34
Analyzed
2026-04-07T05:21:17Z
CDHash
114b42bf7eb9e346e5d39a37e2d6666724f29a85f9e240fd39287e860c603d68

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 39 functions identified

Functions(39)

0x100000628sub_100000628
0x10000186csub_10000186c
0x100001940sub_100001940
0x1000019c8sub_1000019c8
0x100001a7csub_100001a7c
0x100004070sub_100004070
0x100004258sub_100004258
0x10000429csub_10000429c
0x100004448sub_100004448
0x1000044fcsub_1000044fc
0x100004590sub_100004590
0x1000046a0sub_1000046a0
0x100004778sub_100004778
0x1000047e0sub_1000047e0
0x10000484csub_10000484c
0x100004e00sub_100004e00
0x100004ef0sub_100004ef0
0x100004f74sub_100004f74
0x100004f9csub_100004f9c
0x100005038sub_100005038

Imports61 symbols from 1 dylibs

Exports1

_mh_execute_header0x0