xar

JSON
executablemacOS134.7 KBx86_64, arm64

System service — manages bundle lifecycle and network communication

Manages application bundle registration and lifecycle operations through bundle identifier handling. Communicates with remote endpoints over the network, supporting at least 6 distinct service connections. Implements 12 functional operations for bundle-related tasks. Signed by Apple and compiled for both Intel and ARM64 architectures, indicating integration with core macOS system services.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
134.7 KB
UUID
35504BBB-B228-360E-8194-F79AD36F6C0D
Analyzed
2026-04-07T05:21:13Z
CDHash
e6e902abbd359ed52dcd02a63e8da5ee0b3c0943aa1f5dd18ba6e1c758b1bca4

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
0
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 12 functions identified

Functions(12)

0x100000670sub_100000670
0x100001fe0sub_100001fe0
0x100002030sub_100002030
0x100002098sub_100002098
0x1000026c0sub_1000026c0
0x10000295csub_10000295c
0x100002ae4sub_100002ae4
0x100002ba8sub_100002ba8
0x100002bdcsub_100002bdc
0x100002d60sub_100002d60
0x100002d88sub_100002d88
0x100002dbcsub_100002dbc

Imports81 symbols from 2 dylibs

Exports1

_mh_execute_header0x0