usernoted

executablemacOS3.7 MBx86_64, arm64

Apple messaging service — handles iMessage encryption, delivery, and synchronization

Manages iMessage communications including encryption, decryption, and delivery across Apple devices. Accesses Keychain to retrieve cryptographic keys and certificates for signing and authentication. Synchronizes messages and conversation state across linked devices through Apple identity services. Submits usage analytics to Apple and communicates with 10 network endpoints for message routing and account services. Stores private message data and attachment metadata locally while maintaining application group container access for inter-process communication with other Apple messaging components.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 3.7 MB
UUID: DFD39D81-6FB9-3A07-BA32-E1625D3DFD06
Analyzed: 2026-04-09T10:17:03Z
CDHash: 819d7bed303097b74ed35756f2c4571d7727c8ff3eff12600487ae8d2ad13a01

Capabilities

StoragePrivate storage area access

com.apple.private.security.storage.HomeKit [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.Safari [object Object]

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

IpcRestricted application group access

com.apple.private.security.restricted-application-groups

group.com.apple.usernoted

IpcShared application group container access

com.apple.security.application-groups

group.com.apple.usernoted

IpcApple identity/messaging services (iMessage)

/System/Library/PrivateFrameworks/IDS.framework/Versions/A/IDS

AnalyticsApple unified analytics submission

/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics

SecurityKeychain, certificates, code signing

/System/Library/Frameworks/Security.framework/Versions/A/Security

Frameworks48

UserNotificationsSettings UserNotificationsKit UserNotificationsCore DuetActivityScheduler UserNotificationsServices DoNotDisturb BaseBoard IDS PushKit libbsm.0.dylib UserNotifications libsqlite3.dylib ApplePushService Foundation libobjc.A.dylib libSystem.B.dylib AppKit CoreFoundation CoreServices IOKit Intents Security CoreAnalytics NotificationPreferences SystemBanner libswiftAccelerate.dylib(weak)libswiftCompression.dylib(weak)libswiftCore.dylib libswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dylib libswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftCoreMIDI.dylib(weak)libswiftDarwin.dylib libswiftDispatch.dylib libswiftIOKit.dylib(weak)libswiftIntents.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dylib libswiftQuartzCore.dylib(weak)libswiftSpatial.dylib(weak)libswiftUniformTypeIdentifiers.dylib libswiftXPC.dylib libswift_Builtin_float.dylib(weak)libswift_DarwinFoundation3.dylib libswiftos.dylib libswiftsimd.dylib(weak)

Entitlements30

com.apple.ProactiveSummarization.feedbacktrue

com.apple.coreduetd.allowtrue

com.apple.coreduetd.contexttrue

com.apple.das.private.application.masqueradetrue

com.apple.duet.activityscheduler.allowtrue

com.apple.private.accounts.allaccountstrue

com.apple.private.aps-connection-initiatetrue

com.apple.private.contactstrue

com.apple.private.contactsuitrue

com.apple.private.corespotlight.allownotificationstrue

com.apple.private.corespotlight.bundleid com.apple.usernoted

com.apple.private.corespotlight.internaltrue

com.apple.private.corespotlight.search.internaltrue

com.apple.private.dark-wake-pushtrue

com.apple.private.donotdisturb.behavior.resolution.client-identifiers

com.apple.usernotifications.pipeline

com.apple.private.donotdisturb.settings.modify.client-identifiers com.apple.private.ncprefs.dnd

com.apple.private.donotdisturb.state.request.client-identifiers

com.apple.private.nc.usernoted com.apple.UserNotificationCore.SpotlightIndexer

com.apple.private.donotdisturb.state.updates.client-identifiers com.apple.private.nc.usernoted

com.apple.private.ids.messaging

com.apple.private.alloy.bulletinboard

com.apple.private.ids.messaging.urgent-priority

com.apple.private.alloy.bulletinboard

com.apple.private.notificationcenter.servertrue

com.apple.private.push-to-waketrue

com.apple.private.security.restricted-application-groups

group.com.apple.usernoted

com.apple.private.security.storage.HomeKittrue

com.apple.private.security.storage.Safaritrue

com.apple.private.suggestions.contactstrue

com.apple.private.system-banner-clienttrue

com.apple.private.tcc.allow

kTCCServiceAddressBook

com.apple.security.application-groups

group.com.apple.usernoted

com.apple.security.personal-information.addressbooktrue

Interesting Strings

Bundle IDs(150)

com.apple.private.dark-wake-push $com.apple.usernotifications.pipeline0b %com.apple.private.alloy.bulletinboard00 %com.apple.private.alloy.bulletinboard0Z %com.apple.security.application-groups0

File Paths(22)

/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

telemetry(11)

$s9usernoted19DiagnosticsProviderP $s9usernoted30DiagnosticsDestinationProviderP /System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics DiagnosticsDestinationProvider DiagnosticsProvider

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation libswiftCoreFoundation.dylib libswift_DarwinFoundation3.dylib

Endpoints(10)

HostnameNotificationCenter-1553.1.24.201

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

HostnameEcom.apple.private.donotdisturb.behavior.resolution.client-identifiers0

HostnameAcom.apple.private.donotdisturb.settings.modify.client-identifiers

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

2

Hardware

1

IPC

3

Analytics

1

Security

1

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

11

File Paths

22

Bundle IDs

150

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code61543040e3286c792bcae95066fa3c72f720218973e112ad31fea356603e061a

Imports9f6d1be8830d8dd4f0584e8e7b9c3f69a9e9a4027cd4ddadba092dfeede94cda

Frameworks9ea75537cbc22822633d56d4530ccc7801c98273afa32163c2ae94189096450f

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementsa55ac4196d4bcedc0ae78ce71f4c4e97fce2402f15cf84fb106c27abed4c0214

Symbols9f6d1be8830d8dd4f0584e8e7b9c3f69a9e9a4027cd4ddadba092dfeede94cda

Static Libraries0 / 7838 functions identified

Functions(7838)

0x100001fb0sub_100001fb0

0x100002258sub_100002258

0x100002274sub_100002274

0x100002280sub_100002280

0x100002594sub_100002594

0x100002accsub_100002acc

0x100002fe4sub_100002fe4

0x100003160sub_100003160

0x100003234sub_100003234

0x100003278sub_100003278

0x10000327csub_10000327c

0x100003334sub_100003334

0x100003498sub_100003498

0x100003928sub_100003928

0x100003aacsub_100003aac

0x100003b2csub_100003b2c

0x100003e00sub_100003e00

0x100003e54sub_100003e54

0x100003ea4sub_100003ea4

0x100003eecsub_100003eec

Imports1254 symbols from 31 dylibs

libswiftCore.dylib496 Foundation185 libSystem.B.dylib125 UserNotificationsCore78 libswiftDispatch.dylib57

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

findmylocateagent

icloudmailagent

kernelmanager_helper

SidecarDisplayAgent