xpcproxy

JSON
executablemacOS243.9 KBx86_64, arm64

System daemon — manages private storage and exposes XPC services for system operations

Runs as a system daemon with access to private storage areas and exposes functionality through four XPC services. Communicates with up to 10 network endpoints and references 22 bundle identifiers, indicating coordination with other system components and applications. Implements 131 functions across both Intel and Apple Silicon architectures, with seven entitlements enabling privileged operations. The specific purpose is obfuscated by the generic identifier, but the service architecture suggests a background system utility handling inter-process communication and coordinated system tasks.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
243.9 KB
UUID
B23105F1-F737-35B3-A02C-668382A9E961
Analyzed
2026-04-09T10:12:36Z
CDHash
b2c2e7f192a70d53c756b0ae96534aa9c8f55117a1cb13da221e8b7dd678cc3a

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
1
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
6
Telemetry Strings
0
File Paths
2
Bundle IDs
22
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 131 functions identified

Functions(131)

0x1000009d8sub_1000009d8
0x100000a24sub_100000a24
0x100000aacsub_100000aac
0x100000ab8sub_100000ab8
0x100000b64sub_100000b64
0x100000b88sub_100000b88
0x100000bacsub_100000bac
0x100000bf4sub_100000bf4
0x100000d80sub_100000d80
0x100000db0sub_100000db0
0x100000dc0sub_100000dc0
0x100000dccsub_100000dcc
0x100000e7csub_100000e7c
0x100000fe8sub_100000fe8
0x10000108csub_10000108c
0x1000010f4sub_1000010f4
0x1000011ccsub_1000011cc
0x1000012f0sub_1000012f0
0x100001368sub_100001368
0x100001484sub_100001484

Imports221 symbols from 4 dylibs

Exports1

_mh_execute_header0x0