pkd

executablemacOS133.4 KBx86_64, arm64

MDM profile manager — retrieves and applies device management policies

Queries and processes MDM configuration profiles to enforce device management policies on macOS systems. Accesses Mobile Device Management settings through system entitlements and retrieves profiles from network endpoints. Exposes an XPC service for privileged profile management operations and queries RunningBoard to verify process state before applying policies. Handles 33 distinct bundle identifiers and communicates with 7 network endpoints for profile distribution and validation.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 133.4 KB
UUID: FC16F495-6579-331C-B2A5-B6D2954BB117
Analyzed: 2026-04-09T09:59:38Z
CDHash: 6d296cabf5af85d12ada99c09da7de3b76ce5afa8052024d37b2a7ff99a53f59

Capabilities

IpcQuery process state from RunningBoard

com.apple.runningboard.process-state [object Object]

SystemAccess MDM configuration profiles

com.apple.private.managedclient.configurationprofiles [object Object]

Frameworks4

PlugInKitDaemon Foundation libobjc.A.dylib libSystem.B.dylib

Entitlements17

com.apple.private.MobileContainerManager.otherIdLookuptrue

com.apple.private.app-translocation.createtrue

com.apple.private.managedclient.configurationprofilestrue

com.apple.private.security.daemon-containertrue

com.apple.private.tcc.allow

kTCCServiceSystemPolicyDesktopFolder kTCCServiceSystemPolicyDocumentsFolder kTCCServiceSystemPolicyDownloadsFolder kTCCServiceSystemPolicyNetworkVolumes kTCCServiceSystemPolicyRemovableVolumes

com.apple.private.tcc.manager.access.read

com.apple.private.xpc.domain-extension.proxytrue

com.apple.private.xpc.persona-managertrue

com.apple.runningboard.launch_extensionstrue

com.apple.runningboard.launchprocesstrue

com.apple.runningboard.process-statetrue

com.apple.runningboard.statecapturetrue

com.apple.usermanagerd.persona.fetchtrue

com.apple.usermanagerd.persona.fetchbundletrue

com.apple.usermanagerd.persona.observertrue

platform-applicationtrue

seatbelt-profiles

Interesting Strings

Bundle IDs(33)

#com.apple.runningboard.statecapture $com.apple.runningboard.launchprocess $com.apple.runningboard.process-state $com.apple.usermanagerd.persona.fetch %com.apple.private.xpc.persona-manager

File Paths(2)

/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/PrivateFrameworks/PlugInKitDaemon.framework/Versions/A/PlugInKitDaemon

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

Endpoints(7)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

1

Analytics

0

Security

0

System

1

Behavioral Profile

URL Endpoints

5

Telemetry Strings

0

File Paths

2

Bundle IDs

33

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code2d92191a2a88f8e8ef7b1150d05222a7cb7ba8ce209cfbb0784368c012a93b83

Importsd7c50ccc9f85ccf5ff8720a3a582d0c8e1f5ecabcf6af0c06665ab1d1f6511f0

Frameworks8837174829166aa99d2fcf721cd11b2c7c1c92f1f419df5197ca0f7a3a6b4ec7

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementsd3d5e476a2f5359d500e18b0374738515022569de02ebb0211bae7a6ed799c72

Symbolsd7c50ccc9f85ccf5ff8720a3a582d0c8e1f5ecabcf6af0c06665ab1d1f6511f0

Static Libraries0 / 1 functions identified

Functions(1)

0x100000740sub_100000740

Imports4 symbols from 2 dylibs

libobjc.A.dylib3 PlugInKitDaemon1

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

filecoordinationd

attentionawarenessd