fontrestore

executablemacOS190.2 KBx86_64, arm64

Network configuration tool — manages system connectivity and certificate validation

Accesses network configuration settings and monitors reachability state through system APIs. Performs certificate validation and code signing checks using Keychain and security frameworks. Makes network connections to 6 external endpoints, likely for certificate revocation checking or system service communication. Bundles 5 applications and references multiple file paths, suggesting use as a configuration or installation utility for network-dependent components. Operates with keychain access and code signing capabilities typical of Apple's system tools.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 190.2 KB
UUID: 04CE59CE-B337-3F1F-80A0-21675A605E37
Analyzed: 2026-04-07T05:21:16Z
CDHash: 0563010f41fb2130c1a919909d0455f3b0efa277cbdeec74c4781058596a7956

Capabilities

NetworkNetwork configuration and reachability

/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration

SecurityKeychain, certificates, code signing

/System/Library/Frameworks/Security.framework/Versions/A/Security

Frameworks10

FontServices ApplicationServices CoreServices CoreFoundation SystemConfiguration Foundation libobjc.A.dylib libc++.1.dylib libSystem.B.dylib Security

Entitlements1

com.apple.private.tcc.allow

kTCCServiceSystemPolicyAllFiles

Interesting Strings

Bundle IDs(5)

<key>com.apple.private.tcc.allow</key>com.apple.XType com.apple.XType.fontmover com.apple.fontmover com.apple.private.tcc.allow0!

File Paths(8)

/Library//System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontRegistry.dylib /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(6)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

1

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

1

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

0

File Paths

8

Bundle IDs

5

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Codee3732dccaf87dc48f449884197e893b543a0bcf2308e2486f0f0e5670be74102

Imports91f2a732ac99d3f973aa2badeca275f769aa33a935103dbab7216cc88d3a157d

Frameworks6e42bfbc4f4c8de7e2265b3dc270177ba02d5db76f4233afc0db7a8b2982cd12

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements0f4105610025b1b5a2b5801b13c3fea240cdb9f84567a66bb62b2d3e8c82343f

Symbols91f2a732ac99d3f973aa2badeca275f769aa33a935103dbab7216cc88d3a157d

Static Libraries0 / 103 functions identified

Functions(103)

0x100000d30sub_100000d30

0x100000d6csub_100000d6c

0x100000de4sub_100000de4

0x1000012a4sub_1000012a4

0x100001330sub_100001330

0x1000013acsub_1000013ac

0x1000014b8sub_1000014b8

0x10000151csub_10000151c

0x100001628sub_100001628

0x1000016d4sub_1000016d4

0x10000178csub_10000178c

0x1000018c4sub_1000018c4

0x1000018d4sub_1000018d4

0x1000023dcsub_1000023dc

0x100002404sub_100002404

0x1000024b0sub_1000024b0

0x10000250csub_10000250c

0x100002930sub_100002930

0x100002940sub_100002940

0x10000294csub_10000294c

Imports162 symbols from 8 dylibs

CoreFoundation99 libSystem.B.dylib43 ApplicationServices5 libobjc.A.dylib5 Foundation4

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

KernelEventAgent

taskgated-helper

AppleQEMUGuestAgent