cfprefsd

JSON
executablemacOS132.6 KBx86_64, x86_64, arm64

Apple-signed system utility — accesses private storage and communicates via XPC

This Apple-signed executable accesses private storage areas and exposes an XPC service for inter-process communication with other system components. It contacts multiple network endpoints and references 20 bundle identifiers, indicating integration with various macOS subsystems. The minimal function count and small binary size suggest a focused utility purpose, likely supporting background system operations or service coordination rather than user-facing functionality.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
132.6 KB
UUID
476318DB-7587-34E5-8D07-83A6B75082F8
Analyzed
2026-04-07T05:21:15Z
CDHash
84503fdc6e6815e85698dff6d8a2c394e9b378074419a75d4da0a44b5bff27c4

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
2
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
1
Bundle IDs
20
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 4 functions identified

Functions(4)

0x1000005b0sub_1000005b0
0x100000688sub_100000688
0x1000006c8sub_1000006c8
0x10000070csub_10000070c

Imports10 symbols from 2 dylibs

Exports1

_mh_execute_header0x0