notifyd

JSON
executablemacOS238.7 KBx86_64, arm64

System service daemon — processes bundled workflows and network requests

Executes bundled tasks and workflows with hardened runtime protection enabled. Communicates via XPC services with other system components and exposes two service endpoints for inter-process communication. Establishes network connections to 7 endpoints, including telemetry transmission. Manages 18 different bundle identifiers and interacts with 4 file paths, suggesting coordination across multiple application domains.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
238.7 KB
UUID
270AB429-0D43-36E1-B8D0-B361BF9791E2
Analyzed
2026-04-07T05:21:11Z
CDHash
ed01a880db87c14ff01fdadf37c64a5365ab2d8036f37a28bccde7b74088ea57

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
1
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
1
File Paths
4
Bundle IDs
18
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 138 functions identified

Functions(138)

0x100000660sub_100000660
0x1000006acsub_1000006ac
0x1000006f8sub_1000006f8
0x100000770sub_100000770
0x10000078csub_10000078c
0x100000798sub_100000798
0x1000007a8sub_1000007a8
0x100000820sub_100000820
0x10000083csub_10000083c
0x1000008e4sub_1000008e4
0x100000a10sub_100000a10
0x100000ab0sub_100000ab0
0x100000b98sub_100000b98
0x100000c94sub_100000c94
0x100000e74sub_100000e74
0x100000eccsub_100000ecc
0x100000ff4sub_100000ff4
0x100001094sub_100001094
0x1000011b0sub_1000011b0
0x100001250sub_100001250

Imports170 symbols from 2 dylibs

Exports1

_mh_execute_header0x0