fs_usage

JSON
executablemacOS184.2 KBx86_64, arm64

System daemon — manages private Apple framework integration with network communication

A signed Apple system daemon that integrates with a private Apple framework to handle specialized functionality. Establishes network connections to 6 remote endpoints and processes bundle identifiers, file paths, and URLs. Implements 47 functions across two architectures with specific entitlements that grant restricted system access. Operates as a background service with no direct user interface.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
184.2 KB
UUID
34DCE261-7C46-3EA9-8025-145CB6D9696F
Analyzed
2026-04-07T05:21:11Z
CDHash
753fbff9e2605c89ece0d5189e35be3fecddef6031a96f77ab01d1ecb1ec86e7

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
3
Bundle IDs
5
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 47 functions identified

Functions(47)

0x100000718sub_100000718
0x100000fd0sub_100000fd0
0x100001024sub_100001024
0x100001094sub_100001094
0x1000010a8sub_1000010a8
0x1000010bcsub_1000010bc
0x100001570sub_100001570
0x1000016f4sub_1000016f4
0x100001874sub_100001874
0x100001900sub_100001900
0x100001964sub_100001964
0x1000019bcsub_1000019bc
0x1000019ccsub_1000019cc
0x100001a14sub_100001a14
0x100001b00sub_100001b00
0x100001c18sub_100001c18
0x100001dacsub_100001dac
0x100001dfcsub_100001dfc
0x100001e64sub_100001e64
0x10000209csub_10000209c

Imports86 symbols from 2 dylibs

Exports1

_mh_execute_header0x0