fs_usage
executablemacOS184.2 KBx86_64, arm64
System daemon — manages private Apple framework integration with network communication
A signed Apple system daemon that integrates with a private Apple framework to handle specialized functionality. Establishes network connections to 6 remote endpoints and processes bundle identifiers, file paths, and URLs. Implements 47 functions across two architectures with specific entitlements that grant restricted system access. Operates as a background service with no direct user interface.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 184.2 KB
- UUID
- 34DCE261-7C46-3EA9-8025-145CB6D9696F
- Analyzed
- 2026-04-07T05:21:11Z
- CDHash
- 753fbff9e2605c89ece0d5189e35be3fecddef6031a96f77ab01d1ecb1ec86e7
Frameworks3
Entitlements2
Interesting Strings
Bundle IDs(5)
File Paths(3)
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
3
Bundle IDs
5
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 47 functions identified
Functions(47)
0x100000718sub_100000718
0x100000fd0sub_100000fd0
0x100001024sub_100001024
0x100001094sub_100001094
0x1000010a8sub_1000010a8
0x1000010bcsub_1000010bc
0x100001570sub_100001570
0x1000016f4sub_1000016f4
0x100001874sub_100001874
0x100001900sub_100001900
0x100001964sub_100001964
0x1000019bcsub_1000019bc
0x1000019ccsub_1000019cc
0x100001a14sub_100001a14
0x100001b00sub_100001b00
0x100001c18sub_100001c18
0x100001dacsub_100001dac
0x100001dfcsub_100001dfc
0x100001e64sub_100001e64
0x10000209csub_10000209c
Imports86 symbols from 2 dylibs
Exports1
_mh_execute_header0x0