coreaudiod

executablemacOS518.5 KBx86_64, arm64

DriverKit communication service — manages hardware driver interactions

Establishes and maintains direct communication with DriverKit drivers to control hardware devices. Exposes two XPC services for clients to request driver operations and retrieve hardware state. Uses 28 entitlements to access system resources and hardware frameworks. Contacts 7 network endpoints, likely for device firmware updates or cloud-based driver services. Handles 78 different bundle identifiers, suggesting integration with multiple system components and third-party applications.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 518.5 KB
UUID: A97DDB52-9A02-39C1-B8A1-F637C5BC64F6
Analyzed: 2026-04-07T05:21:12Z
CDHash: 869f51532a5f8daa6269a8900291f84fd63c1d1f4e111402bb6e3c9182f03cb1

Capabilities

HardwareDirect DriverKit driver communication

com.apple.private.driverkit.driver-access

com.apple.developer.driverkit.family.audio com.apple.developer.driverkit.allow-any-userclient-access

Frameworks8

caulk CoreAudio CoreFoundation libAudioStatistics.dylib(weak)Foundation libobjc.A.dylib libc++.1.dylib libSystem.B.dylib

Entitlements28

com.apple.TapToRadarKit.service-accesstrue

com.apple.modelmanager.inferenceMonitortrue

com.apple.private.AppleProcessorTrace.Tracetrue

com.apple.private.ZhuGeInternalSupport.CopyValuetrue

com.apple.private.ZhuGeSupport.CopyValuetrue

com.apple.private.airplay.mangrove.clienttrue

com.apple.private.aop-audio.user-accesstrue

com.apple.private.aop-voicetrigger.user-accesstrue

com.apple.private.audio.coreaudiodtrue

com.apple.private.audio.driver-hosttrue

com.apple.private.coreaudio.rpbservertrue

com.apple.private.driverkit.driver-access

com.apple.developer.driverkit.family.audio com.apple.developer.driverkit.allow-any-userclient-access

com.apple.private.exclaves.kernel-domaintrue

com.apple.private.kernel.audio_latencytrue

com.apple.private.kernel.work-intervaltrue

com.apple.private.ppm.clienttrue

com.apple.private.security.clear-library-validationtrue

com.apple.private.security.syspolicy.kext-managementtrue

com.apple.private.stackshot.statstrue

com.apple.private.tcc.manager.check-by-audit-token

kTCCServiceAudioCapture kTCCServiceMicrophone

com.apple.private.virtio.sound.user-accesstrue

com.apple.private.xpc.launchd.job-manager com.apple.private.audio.coreaudiod

com.apple.rootless.storage.AudioSettingstrue

com.apple.security.iokit-user-client-class

AppleProcessorTraceUserClient AppleHWAccessUserClient

com.apple.security.temporary-exception.mach-lookup.global-name

com.apple.TapToRadarKit.service

com.apple.systemstatus.publisher.domains media

com.apple.tailspin.cputracetrue

com.apple.tailspin.dump-outputtrue

Interesting Strings

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(7)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

Keychain

Network

Storage

Hardware

IPC

Analytics

Security

System

Behavioral Profile

URL Endpoints

Telemetry Strings

File Paths

Bundle IDs

IOKit Constants

Library Functions

Structural HashesSHA-256

Code84c2fbab0836af7e6595051d863179a1f7eb3fbf0f366dc6f9fd343e1ff86daf

Imports30ad986df1b4d56337e600fb90dc9d8831bebf6bc34e1f727a67b114491cf484

Frameworks8af9b69c96f46d635725ba40eba5368a740a9e1c40465bef15f75d850e56fdfc

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements9b639daa4d308a60fbe79026dd06cbe01849c2b0cbcace3930613a6b5d313982

Symbols30ad986df1b4d56337e600fb90dc9d8831bebf6bc34e1f727a67b114491cf484

C++ Classes609200e974a637b773fbdd0f0f04d8abb57ed45b45e19446098d50f538fff25f

Static Libraries13 / 414 functions identified

Identified Libraries

tesseract 5.5.2 (13 fn)

Functions(414)

0x1000009b0std::__1::unique_ptr<caulk::concurrent::messenger, std::__1::default_delete<caulk::concurrent::messenger> >::reset[abi:ne200100](caulk::concurrent::messenger*)

0x1000009fcsub_1000009fc

0x100000a10std::__1::__shared_weak_count::__release_shared[abi:ne200100]()

0x100000a7cstd::__1::__function::__value_func<void ()>::~__value_func[abi:ne200100]()

0x100000afcstd::__1::__throw_bad_function_call[abi:ne200100]()

0x100000b48void std::__1::__call_once_proxy[abi:ne200100]<std::__1::tuple<StaticContainer<AMCP::Log::AMCP_Scope_Registry_Statics>::init_static_container_class()::{lambda()#1}&&> >(void*)

0x100000bc0std::__1::__function::__func<AMCP::Log::AMCP_Scope_Registry::initialize()::$_0, std::__1::allocator<AMCP::Log::AMCP_Scope_Registry::initialize()::$_0>, void ()>::target_type() const

0x100000bccstd::__1::__function::__func<AMCP::Log::AMCP_Scope_Registry::initialize()::$_0, std::__1::allocator<AMCP::Log::AMCP_Scope_Registry::initialize()::$_0>, void ()>::target(std::type_info const&) const

0x100000c08std::type_info::operator==[abi:ne200100](std::type_info const&) const

0x100000c54std::__1::__function::__func<AMCP::Log::AMCP_Scope_Registry::initialize()::$_0, std::__1::allocator<AMCP::Log::AMCP_Scope_Registry::initialize()::$_0>, void ()>::operator()()

0x100000e4cstd::__1::__shared_ptr_emplace<AMCP::Log::Scope, std::__1::allocator<AMCP::Log::Scope> >::__on_zero_shared_weak()

0x100000e50std::__1::__shared_ptr_emplace<AMCP::Log::Scope, std::__1::allocator<AMCP::Log::Scope> >::__on_zero_shared()

0x100000e8cstd::__1::__shared_ptr_emplace<AMCP::Log::Scope, std::__1::allocator<AMCP::Log::Scope> >::~__shared_ptr_emplace()

0x100000ee0std::__1::__shared_ptr_emplace<AMCP::Log::Scope, std::__1::allocator<AMCP::Log::Scope> >::~__shared_ptr_emplace()

0x100000f00std::__1::__shared_ptr_emplace<AMCP::Log::AMCP_Scope_Registry, std::__1::allocator<AMCP::Log::AMCP_Scope_Registry> >::__on_zero_shared_weak()

0x100000f04std::__1::__shared_ptr_emplace<AMCP::Log::AMCP_Scope_Registry, std::__1::allocator<AMCP::Log::AMCP_Scope_Registry> >::__on_zero_shared()

0x100000f14std::__1::__shared_ptr_emplace<AMCP::Log::AMCP_Scope_Registry, std::__1::allocator<AMCP::Log::AMCP_Scope_Registry> >::~__shared_ptr_emplace()

0x100000f68std::__1::__shared_ptr_emplace<AMCP::Log::AMCP_Scope_Registry, std::__1::allocator<AMCP::Log::AMCP_Scope_Registry> >::~__shared_ptr_emplace()

0x100000f88std::__1::__function::__func<AMCP::Log::AMCP_Scope_Registry::initialize()::$_0, std::__1::allocator<AMCP::Log::AMCP_Scope_Registry::initialize()::$_0>, void ()>::destroy_deallocate()

0x100000f8cstd::__1::__function::__func<AMCP::Log::AMCP_Scope_Registry::initialize()::$_0, std::__1::allocator<AMCP::Log::AMCP_Scope_Registry::initialize()::$_0>, void ()>::destroy()