textunderstandingd

executablemacOS160.1 KBx86_64, arm64

System service — manages private storage access and telemetry collection

Provides privileged access to private storage areas for other system components through multiple capability grants. Exposes two XPC services for inter-process communication with other Apple system daemons and applications. Collects telemetry data and communicates with Apple backend endpoints. Manages interactions with 87 different bundle identifiers, indicating broad integration across the macOS ecosystem. Operates with 45 entitlements that grant it elevated system access.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 160.1 KB
UUID: 69F766FC-9B8B-3220-AD00-012A72FA1E2C
Analyzed: 2026-04-09T10:08:41Z
CDHash: d439a3eac299ec08482255c1cab8715a3a32989d48eacbed122e31561ddc5af0

Capabilities

StoragePrivate storage area access

com.apple.private.security.storage.Mail [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.MobileAssetGenerativeModels [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.Suggestions [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.TextUnderstanding [object Object]

Entitlements45

App.Intents.ExtractedEntity <dict>

IntelligencePlatform.Entity

EventEntityExtraction <dict>

TextUnderstandingEventsAndOrders <dict>

com.apple.application-identifier com.apple.textunderstandingd

com.apple.corespotlight.privateindex.unsandboxedtrue

com.apple.fileprovider.acl-readtrue

com.apple.fileprovider.acl-writetrue

com.apple.fileprovider.enumeratetrue

com.apple.fileprovider.extension-hosttrue

com.apple.fileprovider.fetch-urltrue

com.apple.finance.privatetrue

com.apple.intelligenceplatform.EntityResolutiontrue

com.apple.intelligenceplatform.Viewtrue

com.apple.mediaanalysisd.analysistrue

com.apple.mediaanalysisd.clienttrue

com.apple.modelcatalog.full-accesstrue

com.apple.modelmanager.inferencetrue

com.apple.private.assets.accessible-asset-types

com.apple.MobileAsset.UAF.FM.GenerativeModels com.apple.MobileAsset.UAF.FM.Overrides

com.apple.private.assetsd.xpcstore_restricted.access

photos.person photos.face

com.apple.private.biome.client-identifier com.apple.textunderstandingd

com.apple.private.biome.read-write

TextUnderstanding.DocumentUnderstanding.PoemBuffer TextUnderstanding.DocumentUnderstanding.Poem TextUnderstanding.DocumentUnderstanding.PoemAnalytics GenerativeModels.GenerativeFunctions.Instrumentation TextUnderstanding.Deletions.Document TextUnderstanding.Output.Document TextUnderstanding.Output.Contact TextUnderstanding.Output.Event TextUnderstanding.Output.NamedEntity TextUnderstanding.Output.Location TextUnderstanding.Output.Topic TextUnderstanding.Output.Link WalletPaymentsCommerce.FoundIn.OrderEmail

com.apple.private.calendar.allow-suggestionstrue

com.apple.private.corespotlight.bundleid com.apple.FileProvider.LocalStorage

com.apple.private.corespotlight.internaltrue

com.apple.private.corespotlight.search.internaltrue

com.apple.private.intelligenceplatform.use-cases <dict>

com.apple.private.intelligenceplatform.views.read-only

visualIdentifier entityAliasECR entitySubgraph entitySummary eventSubgraph peopleSubgraph inferenceFeaturesECR personEntityRelevanceRanking appEntityRelevanceRanking loiEntityRelevanceRanking

com.apple.private.reversetemplatedtrue

com.apple.private.security.storage.Mailtrue

com.apple.private.security.storage.MobileAssetGenerativeModelstrue

com.apple.private.security.storage.Suggestionstrue

com.apple.private.security.storage.TextUnderstandingtrue

com.apple.private.tcc.allow

kTCCServicePhotos kTCCServiceCalendar

com.apple.proactive.PersonalizationPortrait.TextUnderstandingtrue

com.apple.proactive.eventtrackertrue

com.apple.proactive.experiments.responsestrue

com.apple.security.iokit-user-client-class

AGXDeviceUserClient IOSurfaceRootUserClient AGXSharedUserClient AGXCommandQueue AGXDevice H11ANEInDirectPathClient

com.apple.security.personal-information.calendarstrue

com.apple.security.ts.geoservicestrue

com.apple.trial.client

SMART_REPLY_EN UNDERSTANDING_PLATFORM_DOCUMENT_UNDERSTANDING UNDERSTANDING_PLATFORM_FOUND_IN UNDERSTANDING_PLATFORM_POEM PERSONALIZATION_PORTRAIT_GLOBAL SMS_FILTER_KYOTO

com.apple.webkit-clienttrue

mode read-write

platform-applicationtrue

Interesting Strings

Bundle IDs(87)

com.apple.application-identifier com.apple.fileprovider.acl-write com.apple.fileprovider.enumerate com.apple.fileprovider.fetch-url com.apple.modelmanager.inference

File Paths(6)

/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/CoreSpotlight.framework/Versions/A/CoreSpotlight /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/PrivateFrameworks/DocumentUnderstanding.framework/Versions/A/DocumentUnderstanding /System/Library/PrivateFrameworks/SmartRepliesServer.framework/Versions/A/SmartRepliesServer

telemetry(2)

5TextUnderstanding.DocumentUnderstanding.PoemAnalytics <string>TextUnderstanding.DocumentUnderstanding.PoemAnalytics</string>

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation libswiftCoreFoundation.dylib libswift_DarwinFoundation2.dylib

Endpoints(12)

HostnameTextUnderstanding-116.7.5

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Hostname2TextUnderstanding.DocumentUnderstanding.PoemBuffer

Hostname5TextUnderstanding.DocumentUnderstanding.PoemAnalytics

Hostname4GenerativeModels.GenerativeFunctions.Instrumentation

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

4

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

2

File Paths

6

Bundle IDs

87

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Codef81d57e50e2284249c40412d887395e78808b99c0770aa8dd0807f1645ba3a3c

Imports1a0f527d4457c86ce95b09079b45d8bdb2c24988c07d060453ea830835097d21

Frameworksbf9017b5aa257d02271a962043a57da02b0b3528560cbe80aa76a3dca0c1e53f

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementsd0fe070df12a2f03831da4bbd605e967b1ebf7dc2cd720e952764283856ed98d

Symbols1a0f527d4457c86ce95b09079b45d8bdb2c24988c07d060453ea830835097d21

Static Libraries0 / 25 functions identified

Functions(25)

0x100001538main

0x1000015bcsub_1000015bc

0x1000015e0sub_1000015e0

0x10000160csub_10000160c

0x100001630sub_100001630

0x100001730sub_100001730

0x10000178csub_10000178c

0x1000017b0sub_1000017b0

0x1000017dcsub_1000017dc

0x100001850sub_100001850

0x100001888sub_100001888

0x1000018acsub_1000018ac

0x100001a18sub_100001a18

0x100001a90sub_100001a90

0x100001ab4sub_100001ab4

0x100001bb0sub_100001bb0

0x100001c28sub_100001c28

0x100001c5csub_100001c5c

0x100001cb8sub_100001cb8

0x100001cdcsub_100001cdc

Imports64 symbols from 10 dylibs

libSystem.B.dylib20 libswiftCore.dylib13 libobjc.A.dylib10 DocumentUnderstanding9 Foundation6

Exports3

EnterSandbox0x1d70

_mh_execute_header0x0

main0x1538

Similar Binaries1,470 comparable

fileproviderctl

naturallanguaged

assetsubscriptiond

mediacontinuityd

modelcatalogdump