stz

executablemacOS447.7 KBx86_64, arm64, arm64

System service — manages platform configuration and policy enforcement

Apple-signed system executable that operates as a background service with access to private frameworks for deep system integration. Communicates with 6 distinct network endpoints to retrieve or report configuration data and policy information. Contains logic for handling bundle identifiers and file paths, suggesting management of application-level policies or restrictions. The presence of private framework dependencies and policy-related string references indicates this service enforces system-level controls or settings that applications must comply with.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64, arm64
Min OS: 11.0.0
SDK: 26.1.0
File Size: 447.7 KB
UUID: DAAE1E3D-4222-327C-BC70-20C20E67C9BF
Analyzed: 2026-04-07T05:21:16Z
CDHash: 177f4666b34bde20af06c3afc68ebd9f8480679d505331e6a75cb46e07a771e1

Frameworks14

libobjc.A.dylib libSystem.B.dylib ArgumentParserInternal StreamingZip libc++.1.dylib libswiftCore.dylib libswiftCoreFoundation.dylib(weak)libswiftDarwin.dylib(weak)libswiftDispatch.dylib libswiftIOKit.dylib(weak)libswiftObjectiveC.dylib(weak)libswiftSystem.dylib(weak)libswiftXPC.dylib(weak)libswiftFoundation.dylib

Interesting Strings

Bundle IDs(1)

File Paths(2)

/System/Library/PrivateFrameworks/ArgumentParserInternal.framework/Versions/A/ArgumentParserInternal /System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/StreamingZip

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

libswiftCoreFoundation.dylib libswiftFoundation.dylib

Endpoints(6)

Urlhttp://www.apple.com/appleca/root.crl0

Hostnamewww.apple.com

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

0

File Paths

2

Bundle IDs

1

IOKit Constants

0

Library Functions

19

Structural HashesSHA-256

Code95a94f3df36d4c9970f7f9ebaf30ffc790c0279e6406dec3e87dc43a77202312

Importsb20568bf44ca34bbda9745d9c00ac53dcc36954b9998058de3f71b07647ad834

Frameworks24f5baec2ec23e134c132321877735590b58c6099d8f48cbf810a9e4994c8245

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbolsb20568bf44ca34bbda9745d9c00ac53dcc36954b9998058de3f71b07647ad834

Static Libraries19 / 269 functions identified

Identified Libraries

FLAC 1.5.0 (1 fn)SDL2 2.32.10 (6 fn)X11 1.8.12 (2 fn)boost_locale 1.89.0 (1 fn)boost_log 1.89.0 (2 fn)boost_python313 1.89.0 (2 fn)ck 0.7.2 (1 fn)crypto 3.6.1 (1 fn)gio-2.0 2.86.3 (1 fn)harfbuzz-subset 12.3.0 (2 fn)

Function Matches(1)

ZSTD_decompresszstd 1.5.7Medium

Functions(269)

0x100001070sub_100001070

0x100001164sub_100001164

0x100001590sub_100001590

0x100001694sub_100001694

0x100001730sub_100001730

0x100001770sub_100001770

0x1000017b0sub_1000017b0

0x1000017f0sub_1000017f0

0x100001aecsub_100001aec

0x100001b18sub_100001b18

0x100001ba0sub_100001ba0

0x100001bb4sub_100001bb4

0x100001c3csub_100001c3c

0x100001c98sub_100001c98

0x100001d04sub_100001d04

0x100001d18sub_100001d18

0x100001d64sub_100001d64

0x100001dacsub_100001dac

0x100001df4sub_100001df4

0x100001e0csub_100001e0c

Imports310 symbols from 9 dylibs

libswiftCore.dylib149 ArgumentParserInternal80 libswiftFoundation.dylib28 libSystem.B.dylib19 libswiftSystem.dylib13

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

devicerecoverytool

glib-compile-schemas

x86_64-linux-musl-elfedit