transparencyStaticKey
executablemacOS1.5 MBx86_64, arm64
Apple messaging service — handles iMessage routing and delivery
Manages iMessage message routing, encryption, and delivery to Apple's messaging infrastructure. Connects to Apple identity and messaging services to authenticate users and relay encrypted messages across devices. Stores message state and encryption keys in Keychain while maintaining a private storage area for message data. Runs as a hardened runtime process with network access to multiple Apple endpoints and exposes an XPC service for system clients to request messaging operations. Collects telemetry on messaging patterns and service health.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 1.5 MB
- UUID
- 9F42FF77-E3A8-343B-9631-BFB45F8E6BDD
- Analyzed
- 2026-04-09T10:09:29Z
- CDHash
- d79dce84bbed5fc06ba817b038c595834f5482ad977a8fab8ef9b1a8da4bd980
Capabilities
StorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-writeIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-nameIpcApple identity/messaging services (iMessage)
/System/Library/PrivateFrameworks/IDS.framework/Versions/A/IDSIpcApple identity/messaging services (iMessage)
/System/Library/PrivateFrameworks/IDSFoundation.framework/Versions/A/IDSFoundationSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks16
TransparencyIDSInternalSwiftProtobufFoundationlibobjc.A.dyliblibSystem.B.dylibCoreFoundationSecurityIDSFoundationlibswiftCore.dyliblibswiftCoreFoundation.dylib(weak)libswiftDispatch.dylib(weak)libswiftIOKit.dylib(weak)libswiftObjectiveC.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)
Entitlements17
Interesting Strings
Bundle IDs(51)
File Paths(9)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/Frameworks/Security.framework/Versions/A/Security/System/Library/PrivateFrameworks/IDS.framework/Versions/A/IDS/System/Library/PrivateFrameworks/IDSFoundation.framework/Versions/A/IDSFoundation
telemetry(4)
Network Surfaceentitled
Networking Frameworks
Endpoints(8)
DNA Capability Vector
Location
0
Keychain
0
Network
1
Storage
2
Hardware
0
IPC
3
Analytics
0
Security
2
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
4
File Paths
9
Bundle IDs
51
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 3757 functions identified
Functions(3757)
0x1000014e8+[TransparencyGPBDoubleValue descriptor]
0x100001558+[TransparencyGPBFloatValue descriptor]
0x1000015c8+[TransparencyGPBInt64Value descriptor]
0x100001638+[TransparencyGPBUInt64Value descriptor]
0x1000016a8+[TransparencyGPBInt32Value descriptor]
0x100001718+[TransparencyGPBUInt32Value descriptor]
0x100001788+[TransparencyGPBBoolValue descriptor]
0x1000017f8+[TransparencyGPBStringValue descriptor]
0x100001868+[TransparencyGPBBytesValue descriptor]
0x1000018d8+[TransparencyGPBFieldMask descriptor]
0x100001948-[KTStateTransitionOperation initIntending:errorState:]
0x100001a00-[KTStateTransitionOperation description]
0x100001ac0+[KTStateTransitionOperation named:intending:errorState:withBlockTakingSelf:]
0x100001c44sub_100001c44
0x100001c98sub_100001c98
0x100001ce4sub_100001ce4
0x100001d20+[KTStateTransitionOperation named:entering:]
0x100001dac-[KTStateTransitionOperation nextState]
0x100001dbc-[KTStateTransitionOperation setNextState:]
0x100001dc8-[KTStateTransitionOperation intendedState]
Imports346 symbols from 10 dylibs
Exports1
_mh_execute_header0x0