atrun

JSON
executablemacOS118.1 KBx86_64, arm64

System service — manages configuration and state for Apple system features

Provides core system functionality through XPC service interfaces, exposing APIs to other system components and applications. Communicates with multiple Apple network endpoints for configuration, telemetry, or service coordination. Manages persistent state and configuration data across system restarts. Handles 5 distinct bundle identifiers, indicating integration with multiple system frameworks or services. Operates as a privileged system daemon with specific entitlements controlling its access to protected system resources.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
118.1 KB
UUID
A5490EDF-FF5A-3D28-939A-9CDF371D5978
Analyzed
2026-04-09T09:42:34Z
CDHash
36e8eb0b7a7898287c32921855f7db74191af26f4144936dceff607c930a6c35

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
1
Bundle IDs
5
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 7 functions identified

Functions(7)

0x1000006b0sub_1000006b0
0x1000006f4sub_1000006f4
0x10000079csub_10000079c
0x1000007ecsub_1000007ec
0x100000c38sub_100000c38
0x100001418sub_100001418
0x100001434sub_100001434

Imports66 symbols from 2 dylibs

Exports1

_mh_execute_header0x0