shortcuts
executablemacOS394.1 KBx86_64, arm64
System service — manages restricted application group access and keychain operations
Mediates access to shared application group containers and keychain resources for system services and applications. Enforces membership verification and isolation policies for applications within designated groups. Makes outgoing network connections to validate credentials and group memberships. Exposes two XPC services to handle client requests for group access, keychain operations, and cross-application data sharing. Maintains 51 tracked bundle identifiers for permission enforcement.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 394.1 KB
- UUID
- 669AEFD6-032B-33E1-9744-D9DCE8D871AF
- Analyzed
- 2026-04-07T05:21:12Z
- CDHash
- cd071ed2d6874d7f087daeaee70b3dbee377fae52c14fb85a3af02e6694af127
Capabilities
KeychainKeychain access group membership
keychain-access-groupsIpcRestricted application group access
com.apple.private.security.restricted-application-groupsIpcShared application group container access
com.apple.security.application-groupsFrameworks36
ContentKitUniformTypeIdentifiersIntentsCoreVoiceShortcutClientWorkflowKitActionKitFoundationlibobjc.A.dyliblibSystem.B.dylibArgumentParserInternallibswiftAVFoundation.dylib(weak)libswiftAccelerate.dylib(weak)libswiftCompression.dylib(weak)libswiftCore.dyliblibswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dylib(weak)libswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftCoreMIDI.dylib(weak)libswiftCoreMedia.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftIntents.dylib(weak)libswiftMLCompute.dylib(weak)libswiftMetal.dylib(weak)libswiftNaturalLanguage.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dylib(weak)libswiftQuartzCore.dylib(weak)libswiftUniformTypeIdentifiers.dyliblibswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswift_DarwinFoundation3.dyliblibswiftos.dylib(weak)libswiftsimd.dylib(weak)
Entitlements18
Interesting Strings
Bundle IDs(51)
File Paths(8)
/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/Frameworks/UniformTypeIdentifiers.framework/Versions/A/UniformTypeIdentifiers/System/Library/PrivateFrameworks/ActionKit.framework/Versions/A/ActionKit/System/Library/PrivateFrameworks/ArgumentParserInternal.framework/Versions/A/ArgumentParserInternal/System/Library/PrivateFrameworks/ContentKit.framework/Versions/A/ContentKit
Network Surfaceentitled
Networking Frameworks
Endpoints(10)
DNA Capability Vector
Location
0
Keychain
1
Network
1
Storage
0
Hardware
0
IPC
2
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
0
File Paths
8
Bundle IDs
51
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 649 functions identified
Functions(649)
0x100001a48sub_100001a48
0x100001b6csub_100001b6c
0x100001de4sub_100001de4
0x100001e0csub_100001e0c
0x100001e94sub_100001e94
0x100001f3csub_100001f3c
0x100001f40sub_100001f40
0x100001f58sub_100001f58
0x100001f5csub_100001f5c
0x100001f74sub_100001f74
0x100001f78sub_100001f78
0x100001f90sub_100001f90
0x100002050sub_100002050
0x10000218csub_10000218c
0x1000021c4sub_1000021c4
0x10000222csub_10000222c
0x1000022b8sub_1000022b8
0x1000023b0sub_1000023b0
0x100002404sub_100002404
0x100002414sub_100002414
Imports304 symbols from 13 dylibs
Exports1
_mh_execute_header0x0