cfprefsd
executablemacOS132.6 KBx86_64, x86_64, arm64
Apple-signed system utility — accesses private storage and communicates via XPC
This Apple-signed executable accesses private storage areas and exposes an XPC service for inter-process communication with other system components. It contacts multiple network endpoints and references 20 bundle identifiers, indicating integration with various macOS subsystems. The minimal function count and small binary size suggest a focused utility purpose, likely supporting background system operations or service coordination rather than user-facing functionality.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 132.6 KB
- UUID
- 476318DB-7587-34E5-8D07-83A6B75082F8
- Analyzed
- 2026-04-07T05:21:15Z
- CDHash
- 84503fdc6e6815e85698dff6d8a2c394e9b378074419a75d4da0a44b5bff27c4
Capabilities
Frameworks2
Entitlements10
Interesting Strings
Bundle IDs(20)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
2
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
1
Bundle IDs
20
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 4 functions identified
Functions(4)
0x1000005b0sub_1000005b0
0x100000688sub_100000688
0x1000006c8sub_1000006c8
0x10000070csub_10000070c
Imports10 symbols from 2 dylibs
Exports1
_mh_execute_header0x0