whereis
executablemacOS100.1 KBx86_64, arm64
Apple system service — manages bundle-based functionality with network communication
Executes as an Apple-signed system daemon with dual architecture support (x86_64 and arm64). Interacts with one bundle identifier and communicates across six network endpoints, suggesting integration with Apple's service infrastructure. Minimal function count and framework dependencies indicate a focused, lightweight utility. The presence of URL/endpoint strings and network connectivity points to active cloud or service communication, likely for system configuration, telemetry, or service orchestration.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 100.1 KB
- UUID
- 7E77381F-A12A-31EB-A961-7BDC6AF136E9
- Analyzed
- 2026-04-07T05:21:17Z
- CDHash
- 41023551e5bf828d9f873da155565cae45bcc1c61f1e7d64fcbe52f8206af008
Frameworks1
Interesting Strings
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 10 functions identified
Functions(10)
0x100000588sub_100000588
0x100000f38sub_100000f38
0x100001034sub_100001034
0x100001050sub_100001050
0x10000108csub_10000108c
0x1000010a8sub_1000010a8
0x1000010c4sub_1000010c4
0x100001100sub_100001100
0x10000112csub_10000112c
0x100001148sub_100001148
Imports39 symbols from 1 dylibs
Exports1
_mh_execute_header0x0