rpcsvchost
executablemacOS172.0 KBx86_64, arm64
System service manager — manages XPC services and inter-process communication
Exposes two XPC services for other system processes to communicate with protected functionality. References 12 bundle identifiers and communicates with 6 network endpoints, suggesting integration with Apple's service infrastructure. Handles inter-process requests through the private frameworks available to its execution context. Performs 33 distinct functions across bundle and service management operations.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 172.0 KB
- UUID
- C3B5F8D2-2C6F-3699-8076-C44F920F2370
- Analyzed
- 2026-04-09T10:02:02Z
- CDHash
- 0ace82d6e5045c3cbb12c6d3077d9c134d3809ff1c574899f47aed528ccad68d
Frameworks3
Interesting Strings
Bundle IDs(12)
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
1
Bundle IDs
12
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 33 functions identified
Functions(33)
0x100000808main
0x100001ca8_ZL17dce_error_messagejRA160_c
0x100001d04_ZL18rpcsvc_ep_registerRKNSt3__111__wrap_iterIPNS_4pairIPK13rpcsvc_pluginPK22rpc_if_handle_vector_tEEEESC_
0x100001fa0_ZL14run_dcerpc_svcPv
0x100002058launch_socket_listen::operator()(std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, int> const&)
0x1000021e4darwin::launch_job::~launch_job()
0x100002230std::__1::vector<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, int>, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, int> > >::__destroy_vector::operator()[abi:ne200100]()
0x100002284std::__1::vector<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, int>, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, int> > >::clear[abi:ne200100]()
0x1000022d4_ZL25rpcsvc_use_binding_stringPKc
0x100002470unsigned int platform::detail::split_string_internal<char, std::__1::allocator<char*>, std::__1::vector>(char*, char*, char, std::__1::vector&<char*, std::__1::allocator<char*> >, bool)
0x10000254cstd::__1::vector<char*, std::__1::allocator<char*> >::push_back[abi:ne200100](char* const&)
0x100002620std::__1::vector<char*, std::__1::allocator<char*> >::__throw_length_error[abi:ne200100]()
0x100002638std::__1::__throw_length_error[abi:ne200100](char const*)
0x100002694std::length_error::length_error[abi:ne200100](char const*)
0x1000026c8std::__1::__allocation_result<std::__1::allocator_traits<std::__1::allocator<char*> >::pointer> std::__1::__allocate_at_least[abi:ne200100]<std::__1::allocator<char*> >(std::__1::allocator<char*>&, unsigned long)
0x100002710std::__throw_bad_array_new_length[abi:ne200100]()
0x100002744std::__1::__allocation_result<std::__1::allocator_traits<std::__1::allocator<std::__1::pair<rpcsvc_plugin const*, rpc_if_handle_vector_t const*> > >::pointer> std::__1::__allocate_at_least[abi:ne200100]<std::__1::allocator<std::__1::pair<rpcsvc_plugin const*, rpc_if_handle_vector_t const*> > >(std::__1::allocator<std::__1::pair<rpcsvc_plugin const*, rpc_if_handle_vector_t const*> >&, unsigned long)
0x10000278c_GLOBAL__sub_I_rpcsvchost.cpp
0x1000027b8darwin::launch_checkin(darwin::launch_job&)
0x100002d98std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >::__throw_length_error[abi:ne200100]()