mcxrefresh

executablemacOS132.0 KBx86_64, arm64

Apple system service — manages telemetry and diagnostic data collection

Collects diagnostic and telemetry data from the macOS system and transmits it to Apple servers. Communicates with multiple network endpoints to upload system metrics, crash reports, or usage statistics. Interacts with other system components through private frameworks to gather diagnostic information. Runs as a background daemon with no direct user interaction.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 132.0 KB
UUID: 5C2DC557-E492-3681-A0A6-81165F6FF732
Analyzed: 2026-04-07T05:21:11Z
CDHash: 6893050a759d458f55766511037effc3fa02a92fc94053ba9dd3e567868cf9eb

Frameworks6

libMobileGestalt.dylib ManagedClient Foundation libobjc.A.dylib libSystem.B.dylib CoreFoundation

Interesting Strings

Bundle IDs(4)

<string>com.apple.compilers.llvm.clang.1_0</string><string>com.apple.mcxrefresh</string>com.apple.ManagedClient.agent com.apple.mcxrefresh

File Paths(3)

/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/PrivateFrameworks/ManagedClient.framework/Versions/A/ManagedClient

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(7)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

0

File Paths

3

Bundle IDs

4

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Codec86db24882b04afaff721c9c5bb7a2196f9333a6b4e6884aa125e6e2f0520fe8

Importsf6567dbf6c55a81fc32e478ef0f3fcafd72baf992ed0543ebff46c1fe409e9dc

Frameworksb64f6ed3f82971df899c8ad686d5a694e6c5e7d2d4df74c87e6596eb10a26d00

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbolsf6567dbf6c55a81fc32e478ef0f3fcafd72baf992ed0543ebff46c1fe409e9dc

Static Libraries0 / 2 functions identified

Functions(2)

0x100000928sub_100000928

0x100000bf8sub_100000bf8

Imports25 symbols from 5 dylibs

libSystem.B.dylib16 Foundation3 libobjc.A.dylib3 ManagedClient2 CoreFoundation1

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

create_automation_image_overlay

attach_automation_image

repairHomePermissions