trustd

JSON
executablemacOS1.4 MBx86_64, arm64

System service daemon — manages network connectivity and security operations

Executes privileged networking and security operations for system-level clients via 13 XPC services. Performs direct hardware/driver communication and manages network operations through Core networking and NWConnection frameworks. Accesses Keychain and handles certificates and code signing verification. Maintains private storage areas for operational data and logs. Communicates with 27 network endpoints and includes 23 telemetry collection points across 99 bundle identifiers, indicating integration with multiple system components and diagnostic reporting infrastructure.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
1.4 MB
UUID
F9D166C9-A773-337A-9B6D-8358B341A382
Analyzed
2026-04-09T10:09:55Z
CDHash
030c11745616a39b1eb5bb951699b34945a537ca52642bb64122e7c1ddd1251d

Interesting Strings

Network Surface

API Usage

DNA Capability Vector

Location
0
Keychain
0
Network
2
Storage
3
Hardware
1
IPC
0
Analytics
0
Security
1
System
0

Behavioral Profile

URL Endpoints
12
Telemetry Strings
23
File Paths
63
Bundle IDs
99
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 1335 functions identified

Functions(1335)

0x1000012b0sub_1000012b0
0x10000133csub_10000133c
0x100001358sub_100001358
0x100001408sub_100001408
0x100001424sub_100001424
0x100001440sub_100001440
0x10000145csub_10000145c
0x10000158csub_10000158c
0x100001608sub_100001608
0x100001614sub_100001614
0x10000174csub_10000174c
0x10000184csub_10000184c
0x1000018a4sub_1000018a4
0x100001914sub_100001914
0x1000019e8sub_1000019e8
0x1000019f0sub_1000019f0
0x100001a04sub_100001a04
0x100001b44sub_100001b44
0x100001b78sub_100001b78
0x100001b88sub_100001b88

Imports819 symbols from 12 dylibs

Exports1

_mh_execute_header0x0