diskutil
executablemacOS1.9 MBx86_64, arm64
System daemon — manages hardware communication and storage access with telemetry
Communicates directly with hardware and drivers while maintaining exceptions for additional file system paths. Exposes two XPC services for inter-process communication with other system components. Transmits telemetry data to remote endpoints and references multiple bundle identifiers, suggesting coordination with other Apple services. Implements 1911 functions across 23 frameworks, including 4 private frameworks, to perform its core responsibilities.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 1.9 MB
- UUID
- EEE9B22F-5141-3012-AF3B-A532F02AAC2D
- Analyzed
- 2026-04-07T05:21:16Z
- CDHash
- 52f2e875836f28fdbf817544be24ecca7eacf1846ba0f3a23b40bf3ffc18363d
Capabilities
StorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-writeHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitFrameworks23
DiskManagementFoundationStorageKitDiskArbitrationlibicucore.A.dyliblibncurses.5.4.dyliblibCoreStorage.dyliblibcsfde.dyliblibobjc.A.dyliblibSystem.B.dylibCoreFoundationIOKitArgumentParserInternalDiskImages2libswiftCore.dyliblibswiftCoreFoundation.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftObjectiveC.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_DarwinFoundation2.dyliblibswiftos.dylib
Entitlements10
Interesting Strings
Bundle IDs(63)
File Paths(18)
/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/ACMLib/ACMLib.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/CommonUtil.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibCall.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibCallBlock.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibSerialization.c
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
1
Hardware
1
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
3
File Paths
18
Bundle IDs
63
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 1911 functions identified
Functions(1911)
0x1000018d0-[EraseDisk init]
0x100001918-[EraseDisk diskHelp]
0x100001944-[EraseDisk volumeHelp]
0x100001970-[EraseDisk reformatHelp]
0x1000019a4-[EraseDisk opticalHelp]
0x1000019d8-[EraseDisk zeroHelp]
0x100001a0c-[EraseDisk randomHelp]
0x100001a40-[EraseDisk secureHelp]
0x100001a74-[EraseDisk initDMAndGetDiskFromArgumentString:]
0x100001b6c-[EraseDisk eraseDisk:]
0x100002244sub_100002244
0x100002310sub_100002310
0x100002320sub_100002320
0x10000232c-[EraseDisk eraseVolume:]
0x1000028a8sub_1000028a8
0x100002974-[EraseDisk reformat:]
0x100002d3csub_100002d3c
0x100002d48-[EraseDisk eraseOptical:]
0x100002f74sub_100002f74
0x100002f80-[EraseDisk zeroDisk:]
Imports730 symbols from 18 dylibs
Exports1
_mh_execute_header0x0