smbutil

JSON
executablemacOS377.5 KBx86_64, arm64

System service — manages Apple bundle operations and network communications

Handles Apple bundle identification and operations across the system. Communicates with 6 network endpoints to sync or retrieve bundle-related data. Uses both public and private frameworks to integrate with core system services. Contains 155 functions organized around bundle management, file path operations, and network communication. Executes as a signed Apple system process with no user interface.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
377.5 KB
UUID
3AF890C4-1F8D-3C89-98CE-FCB07565B348
Analyzed
2026-04-07T05:21:11Z
CDHash
51e110389a4474a8b31abc6809f96a7a89184e5ce0a5ca273b599d76aa800ca2

Interesting Strings

Network Surface

Networking Frameworks

API Usage

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
4
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 155 functions identified

Functions(155)

0x100000b48json_add_array
0x100000cd0create_cfstr
0x100000d78json_add_cfstr
0x100000e6cjson_add_dict
0x100000f34json_add_bool
0x100001010json_add_num
0x100001184json_add_str
0x100001294json_add_inputs_str
0x100001344get_key_dict
0x100001440json_add_outputs_dict
0x1000014f0json_add_outputs_str
0x1000015a0json_add_results
0x100001660json_add_results_str
0x100001710json_add_time_stamp
0x100001840json_add_timing
0x100001900json_print_cf_object
0x100001a94cmd_lookup
0x100001e34lookup_usage
0x100001e68ntstatus_to_err
0x100001fccmain

Imports185 symbols from 8 dylibs

Exports88

CStringCreateWithCFString0x222c
GetNetworkAccountSID0xaeac
LsarClose0xc7cc
LsarGetUserName0xd1b0
LsarLookupNames0xcaec
LsarOpenPolicy20xce60
NetApiBufferFree0xaa70
NetShareEnum0xaaa4
NetShareGetInfo0xa7e4
NetrShareEnum0xd4e8
NetrShareGetInfo0xd838
RapNetApiBufferFree0xdfec
RapNetShareEnum0xdb7c
_Z13rpc_pool_freePvS_0xbe50
_Z16make_rpc_bindingPKcS0_0xbf78
_Z17rpc_pool_allocatePvj0xbe48
_Z20rpc_exception_statusP14_dcethread_exc0xc13c
_ZN11rpc_bindingC1EPKc0xbf20
_ZN11rpc_bindingC1ERKS_0xbea0
_ZN11rpc_bindingC2EPKc0xbea4
_ZN11rpc_bindingC2ERKS_0xbe54
_ZN11rpc_bindingD1Ev0xbf74
_ZN11rpc_bindingD2Ev0xbf24
_ZN11rpc_mempool4freeEPv0xbdac
_ZN11rpc_mempool5allocEm0xbc90
_ZN11rpc_mempool7destroyEPS_0xbb74
_ZN11rpc_mempool8allocateEm0xbb40
_ZN11rpc_mempoolC1Ev0xbb70
_ZN11rpc_mempoolC2Ev0xbba0
_ZN11rpc_mempoolD1Ev0xbb9c
_ZN11rpc_mempoolD2Ev0xbc20
_ZN8platform18invoke_new_handlerEv0xadd8
_ZN8platform8allocateEPvm0xae24
_mh_execute_header0x0
cmd_dfs0x32b0
cmd_identity0x2e14
cmd_lookup0x1a94
cmd_multichannel0x410c
cmd_smbstat0x8eb8
cmd_snapshot0x8458
cmd_statshares0x6190
cmd_status0x26c0
cmd_view0x2354
createShareArrayFromShareDictionary0x22a8
dfs_usage0x3818
dirFlags0x18300
enumFlags0x183fa
fileFlags0x18206
get_share_name0x60ac
identity_usage0x3134
iod_state_to_text0x18060
json_add_array0xb48
json_add_bool0xf34
json_add_cfstr0xd78
json_add_dict0xe6c
json_add_inputs_str0x1294
json_add_num0x1010
json_add_outputs_dict0x1440
json_add_outputs_str0x14f0
json_add_results0x15a0
json_add_results_str0x1660
json_add_str0x1184
json_add_time_stamp0x1710
json_add_timing0x1840
json_print_cf_object0x1900
leaseState0x1810c
lookup_usage0x1e34
lsarpc_v0_0_c_ifspec0x18550
main0x1fcc
multichannel_usage0x43d4
ntstatus_to_err0x1e68
objType0x180a8
print_delimiter0x3938
print_nic_info0x39b8
smbMCShares0x205c0
smbShares0x205c8
smbStats0x205d8
smb_getfsstat0x5848
smb_netshareenum0x58e0
smbstat_usage0xa604
snapshotShares0x205d0
snapshot_usage0x8744
srvsvc_v3_0_c_ifspec0x1b6e8
state_to_str0x3958
statshares_usage0x6464
status_usage0x2aac
verbose0x205b8
view_usage0x2670