kextfind

JSON
executablemacOS220.5 KBx86_64, arm64

System daemon — manages hardware device communication and telemetry reporting

Communicates directly with hardware drivers and devices through low-level hardware interfaces. Exposes an XPC service for interprocess communication with other system components and applications. Collects telemetry data and reports metrics to Apple endpoints. Accesses multiple file paths for configuration or logging purposes. Supports both Intel and ARM64 architectures for compatibility across macOS devices.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
220.5 KB
UUID
84B04C4F-2738-32E1-A73D-CDE0BF09AE07
Analyzed
2026-04-07T05:21:16Z
CDHash
ab4296ee53ea776aeaf0825a1ac58f79c769a24b468021525ea3e9758a3c91d0

Capabilities

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
4
File Paths
3
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 103 functions identified

Functions(103)

0x100000878sub_100000878
0x100000e60sub_100000e60
0x100001248sub_100001248
0x100001508sub_100001508
0x1000015b4sub_1000015b4
0x100001678sub_100001678
0x1000017f0sub_1000017f0
0x1000018b8sub_1000018b8
0x100001980sub_100001980
0x1000019fcsub_1000019fc
0x100001a9csub_100001a9c
0x100001b3csub_100001b3c
0x100001b4csub_100001b4c
0x100001b74sub_100001b74
0x100001b7csub_100001b7c
0x100001b84sub_100001b84
0x100001d30sub_100001d30
0x100001da8sub_100001da8
0x100001dd0sub_100001dd0
0x100001dfcsub_100001dfc

Imports136 symbols from 3 dylibs

Exports1

_mh_execute_header0x0