usbnotificationagent
executablemacOS251.2 KBx86_64, arm64
Hardware communication utility — enables direct driver and device interaction
Provides low-level hardware access through IOKit for direct communication with drivers and peripheral devices. Exposes an XPC service that allows clients to perform hardware operations and query device status. Communicates with multiple network endpoints for potential telemetry or configuration. Signed by Apple and runs with capabilities to bypass normal hardware access restrictions.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 251.2 KB
- UUID
- 04C62E29-0BF8-339E-A6A1-E2990226C466
- Analyzed
- 2026-04-09T10:11:11Z
- CDHash
- 499e6d43583409c2f85205b7e4299bad4cf499a378a408385e6698efa24e72e7
Capabilities
HardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitFrameworks7
Interesting Strings
Bundle IDs(20)
File Paths(6)
/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit/System/Library/Frameworks/UserNotifications.framework/Versions/A/UserNotifications
iokit_constants(1)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
6
Bundle IDs
20
IOKit Constants
1
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 162 functions identified
Functions(162)
0x100000ea0sub_100000ea0
0x1000012b8sub_1000012b8
0x10000134csub_10000134c
0x100001520sub_100001520
0x100001608sub_100001608
0x100001728sub_100001728
0x1000019c4sub_1000019c4
0x100001ad4sub_100001ad4
0x100001ae0sub_100001ae0
0x100001aec+[IOPortHelper systemSupportsTransportType:]
0x100001bd4+[IOPortHelper copyIOPortForService:]
0x100001cd4+[IOPortHelper stringForTransportType:]
0x100001d58-[IOPortHelper initWithService:]
0x100001fcc-[IOPortHelper dealloc]
0x100002030-[IOPortHelper supportsTransportType:]
0x1000021e8-[IOPortHelper provisionedTransportType:]
0x1000023a0-[IOPortHelper activeTransportType:]
0x100002558-[IOPortHelper hasAttachedHub]
0x100002610-[IOPortHelper description]
0x1000026b0-[IOPortHelper portType]
Imports105 symbols from 6 dylibs
Exports1
_mh_execute_header0x0