trustd
executablemacOS1.4 MBx86_64, arm64
System service daemon — manages network connectivity and security operations
Executes privileged networking and security operations for system-level clients via 13 XPC services. Performs direct hardware/driver communication and manages network operations through Core networking and NWConnection frameworks. Accesses Keychain and handles certificates and code signing verification. Maintains private storage areas for operational data and logs. Communicates with 27 network endpoints and includes 23 telemetry collection points across 99 bundle identifiers, indicating integration with multiple system components and diagnostic reporting infrastructure.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 1.4 MB
- UUID
- F9D166C9-A773-337A-9B6D-8358B341A382
- Analyzed
- 2026-04-09T10:09:55Z
- CDHash
- 030c11745616a39b1eb5bb951699b34945a537ca52642bb64122e7c1ddd1251d
Capabilities
NetworkCore networking (HTTP, FTP, DNS)
/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetworkNetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks15
Entitlements14
Interesting Strings
Bundle IDs(99)
File Paths(63)
telemetry(23)
Network Surface
Networking Frameworks
Endpoints(27)
Hostnamewww.apple.com
HostnameSecurity-61901.40.77
Ipv42.5.29.37
Ipv41.3.6.1
Ipv45.5.7.1
Ipv42.5.29.30
Ipv45.5.7.3
Hostnamevalid.apple.com
Ipv4100.6.2.10
Hostnameapple.com
Hostnameicloud.com
Hostnameicloud-content.com
Hostnamecdn-apple.com
Hostnamemzstatic.com
Hostnameapple-studies.com
Hostnameocsp2.apple.com
Hostnameocsp.apple.com
Hostnameocsp-uat.corp.apple.com
Ipv60:8:16
Hostnamemacosx26.1.internal
Hostnamecrl.apple.com
API Usage
DNA Capability Vector
Location
0
Keychain
0
Network
2
Storage
3
Hardware
1
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
12
Telemetry Strings
23
File Paths
63
Bundle IDs
99
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 1335 functions identified
Functions(1335)
0x1000012b0sub_1000012b0
0x10000133csub_10000133c
0x100001358sub_100001358
0x100001408sub_100001408
0x100001424sub_100001424
0x100001440sub_100001440
0x10000145csub_10000145c
0x10000158csub_10000158c
0x100001608sub_100001608
0x100001614sub_100001614
0x10000174csub_10000174c
0x10000184csub_10000184c
0x1000018a4sub_1000018a4
0x100001914sub_100001914
0x1000019e8sub_1000019e8
0x1000019f0sub_1000019f0
0x100001a04sub_100001a04
0x100001b44sub_100001b44
0x100001b78sub_100001b78
0x100001b88sub_100001b88
Imports819 symbols from 12 dylibs
Exports1
_mh_execute_header0x0