containermanagerd

executablemacOS101.1 KBx86_64, arm64

Service daemon — manages private storage and system service coordination

Runs as a system service with exclusive access to private storage areas for configuration or state management. Exposes an XPC service endpoint for inter-process communication with other system components and applications. Makes network connections to 7 endpoints, likely for service coordination, telemetry, or data synchronization. Holds 19 entitlements governing resource access and sandboxed operations. References multiple bundle identifiers suggesting integration with other system services.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 101.1 KB
UUID: CCF1F995-FA57-3635-A6B1-077E58D167F6
Analyzed: 2026-04-09T09:45:19Z
CDHash: 1305699409649b11448b132d976319a8d6cf18bb56b37f01d718b1262175c7e1

Capabilities

StoragePrivate storage area access

com.apple.private.security.storage.AppBundles [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.DaemonContainers [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.Mail [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.MobileContainerManager [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.containers [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.locationd [object Object]

Frameworks4

ContainerManagerCommon ContainerManagerSystem ContainerManagerUser libSystem.B.dylib

Entitlements19

com.apple.mkb.usersession.infotrue

com.apple.private.MobileContainerManager.proxytrue

com.apple.private.MobileContainerManager.repairtrue

com.apple.private.memorystatustrue

com.apple.private.security.appcontainer-authoritytrue

com.apple.private.security.storage.AppBundlestrue

com.apple.private.security.storage.DaemonContainerstrue

com.apple.private.security.storage.Mailtrue

com.apple.private.security.storage.MobileContainerManagertrue

com.apple.private.security.storage.containerstrue

com.apple.private.security.storage.locationdtrue

com.apple.private.vfs.allow-low-space-writestrue

com.apple.rootless.datavault.metadatatrue

com.apple.runningboard.terminateprocesstrue

com.apple.security.enterprise-volume-accesstrue

com.apple.usermanagerd.persona.fetchtrue

com.apple.usermanagerd.persona.fetchbundletrue

com.apple.usermanagerd.persona.grantSandboxExtensiontrue

com.apple.usermanagerd.persona.observertrue

Interesting Strings

Bundle IDs(39)

$com.apple.usermanagerd.persona.fetch %com.apple.rootless.datavault.metadata 'com.apple.private.security.storage.Mail 'com.apple.runningboard.terminateprocess 'com.apple.usermanagerd.persona.observer

File Paths(3)

/System/Library/PrivateFrameworks/ContainerManagerCommon.framework/Versions/A/ContainerManagerCommon /System/Library/PrivateFrameworks/ContainerManagerSystem.framework/Versions/A/ContainerManagerSystem /System/Library/PrivateFrameworks/ContainerManagerUser.framework/Versions/A/ContainerManagerUser

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Endpoints(7)

HostnameMobileContainerManager-725.40.12

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

6

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

0

File Paths

3

Bundle IDs

39

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code42d60236cc91ec7dfc4bec927adb2f7254202777cf431c5e6a5150d45728c4da

Importsa14465354febac6605f4bbbf88030dbe28cdd47fe604630295ca1648c12a23c8

Frameworks8c6ce0b058cf8f43dc344c1b76913d01b81963769993ec7c0cdb8619b3bc9afc

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements05bcb8fc018fe31986e3e10abf09e308cef438f3e44b9e736f443f66e87f8e60

Symbolsa14465354febac6605f4bbbf88030dbe28cdd47fe604630295ca1648c12a23c8

Static Libraries0 / 1 functions identified

Functions(1)

0x100000680sub_100000680

Imports3 symbols from 2 dylibs

libSystem.B.dylib2 ContainerManagerCommon1

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

containermanagerd_system

ContainerMigrationService