pwpolicy
executablemacOS171.6 KBx86_64, arm64
System service — manages application bundles and service endpoints
Handles registration, validation, and lifecycle management of application bundles across the system. Exposes an XPC service for other processes to query bundle information, resolve application paths, and manage service endpoints. Communicates with 6 network endpoints, likely for service discovery, validation, or remote configuration. Operates as a privileged system daemon with access to multiple private frameworks.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 171.6 KB
- UUID
- 39EB863F-A9B5-3E11-A74A-1B3D56EFFF59
- Analyzed
- 2026-04-07T05:21:14Z
- CDHash
- 8b65824a915e21275825ec41dd8326144a14c62ba002b531e87c55d2f9627a31
Interesting Strings
Bundle IDs(2)
File Paths(3)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
3
Bundle IDs
2
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 32 functions identified
Functions(32)
0x100000878sub_100000878
0x1000023d4sub_1000023d4
0x10000241csub_10000241c
0x1000024c8sub_1000024c8
0x1000024fcsub_1000024fc
0x100002598sub_100002598
0x1000025ccsub_1000025cc
0x10000273csub_10000273c
0x100002828sub_100002828
0x100002888sub_100002888
0x1000028d8sub_1000028d8
0x100002910sub_100002910
0x100002b88sub_100002b88
0x100002d1csub_100002d1c
0x100002e7csub_100002e7c
0x100002ef8sub_100002ef8
0x1000031a4sub_1000031a4
0x100003200sub_100003200
0x1000032a4sub_1000032a4
0x1000032b4sub_1000032b4
Imports141 symbols from 4 dylibs
Exports1
_mh_execute_header0x0