pwpolicy

JSON
executablemacOS171.6 KBx86_64, arm64

System service — manages application bundles and service endpoints

Handles registration, validation, and lifecycle management of application bundles across the system. Exposes an XPC service for other processes to query bundle information, resolve application paths, and manage service endpoints. Communicates with 6 network endpoints, likely for service discovery, validation, or remote configuration. Operates as a privileged system daemon with access to multiple private frameworks.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
171.6 KB
UUID
39EB863F-A9B5-3E11-A74A-1B3D56EFFF59
Analyzed
2026-04-07T05:21:14Z
CDHash
8b65824a915e21275825ec41dd8326144a14c62ba002b531e87c55d2f9627a31

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
3
Bundle IDs
2
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 32 functions identified

Functions(32)

0x100000878sub_100000878
0x1000023d4sub_1000023d4
0x10000241csub_10000241c
0x1000024c8sub_1000024c8
0x1000024fcsub_1000024fc
0x100002598sub_100002598
0x1000025ccsub_1000025cc
0x10000273csub_10000273c
0x100002828sub_100002828
0x100002888sub_100002888
0x1000028d8sub_1000028d8
0x100002910sub_100002910
0x100002b88sub_100002b88
0x100002d1csub_100002d1c
0x100002e7csub_100002e7c
0x100002ef8sub_100002ef8
0x1000031a4sub_1000031a4
0x100003200sub_100003200
0x1000032a4sub_1000032a4
0x1000032b4sub_1000032b4

Imports141 symbols from 4 dylibs

Exports1

_mh_execute_header0x0