fileproviderctl
executablemacOS381.6 KBx86_64, arm64
System service manager — handles inter-process communication and file access exceptions
Manages Mach service access and file path permissions for system processes. Provides three XPC services for inter-process communication with other system components. Handles telemetry reporting through two separate data channels and communicates with four network endpoints. Accesses 60 bundle identifiers and maintains exception-based access controls for file system operations. Runs as a privileged system daemon with exception handling capabilities for Mach services and storage paths beyond standard sandboxing.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 381.6 KB
- UUID
- 35440D3F-1446-3C79-9190-31DC7CA18CCA
- Analyzed
- 2026-04-07T05:21:14Z
- CDHash
- e498c935f4cf3ce83c013a434e963a27b1fe27fda8c0fd61ec1ca45617f88479
Capabilities
StorageException: access additional file paths
com.apple.security.exception.files.home-relative-path.read-onlyIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-nameFrameworks41
libedit.3.dylibSoftLinkingUniformTypeIdentifiersUserManagementDesktopServicesPrivCoreServiceslibsandbox.1.dylibSpaceAttributionGenerationalStorageFileProviderDaemonFileProviderFoundationlibobjc.A.dyliblibSystem.B.dylibCoreFoundationlibswiftAVFoundation.dylib(weak)libswiftAccelerate.dylib(weak)libswiftCompression.dylib(weak)libswiftCore.dyliblibswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dylib(weak)libswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftCoreMIDI.dylib(weak)libswiftCoreMedia.dylib(weak)libswiftCoreMediaIO.dylib(weak)libswiftDispatch.dylib(weak)libswiftIOKit.dylib(weak)libswiftIntents.dylib(weak)libswiftMLCompute.dylib(weak)libswiftMetal.dylib(weak)libswiftNaturalLanguage.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dylib(weak)libswiftQuartzCore.dylib(weak)libswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswiftos.dylib(weak)libswiftsimd.dylib(weak)
Entitlements24
Interesting Strings
Bundle IDs(60)
File Paths(13)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices/System/Library/Frameworks/FileProvider.framework/Versions/A/FileProvider/System/Library/Frameworks/FileProviderUI.framework/Contents/MacOS/FileProviderUI/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
Network Surface
Networking Frameworks
Endpoints(8)
API Usage
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
1
Hardware
0
IPC
1
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
2
File Paths
13
Bundle IDs
60
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 270 functions identified
Functions(270)
0x100001df0sub_100001df0
0x100001eecsub_100001eec
0x100001fa8sub_100001fa8
0x100002084sub_100002084
0x10000208csub_10000208c
0x100002094sub_100002094
0x100002174sub_100002174
0x1000022b4sub_1000022b4
0x1000022c4sub_1000022c4
0x100002574sub_100002574
0x100002584sub_100002584
0x10000258csub_10000258c
0x10000268csub_10000268c
0x100002760sub_100002760
0x1000027b0sub_1000027b0
0x1000027f4sub_1000027f4
0x100002b10sub_100002b10
0x100002c1csub_100002c1c
0x100002c6csub_100002c6c
0x100002cb4sub_100002cb4
Imports274 symbols from 9 dylibs
Exports1
_mh_execute_header0x0