sa

JSON
executablemacOS132.0 KBx86_64, arm64

Apple system service — manages core functionality via XPC

System daemon that exposes functionality through XPC inter-process communication to other Apple services and applications. Communicates with six network endpoints to perform operations like data synchronization, service discovery, or cloud connectivity. Contains one bundle identifier and accesses three file paths for persistent state or configuration. Operates with Apple code signature and runs across both x86_64 and ARM64 architectures.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
132.0 KB
UUID
985A75CD-13B9-3E6F-8471-D5B2EC58BE92
Analyzed
2026-04-07T05:21:14Z
CDHash
c9154bbb24333cd5e38af8d2fece053ee8c69008c6a9f0b7ca747608d8693a2e

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
3
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 26 functions identified

Functions(26)

0x100000628sub_100000628
0x10000088csub_10000088c
0x1000008d4sub_1000008d4
0x100000a18sub_100000a18
0x100000ae8sub_100000ae8
0x100001260sub_100001260
0x10000132csub_10000132c
0x10000142csub_10000142c
0x100001524sub_100001524
0x1000015ecsub_1000015ec
0x1000016ecsub_1000016ec
0x1000017b4sub_1000017b4
0x10000187csub_10000187c
0x1000018b0sub_1000018b0
0x1000019c8sub_1000019c8
0x1000019dcsub_1000019dc
0x100001b60sub_100001b60
0x100001b84sub_100001b84
0x100002004sub_100002004
0x1000023a8sub_1000023a8

Imports32 symbols from 1 dylibs

Exports1

_mh_execute_header0x0