actool

executablemacOS116.3 KBx86_64, arm64

System service — connects to Apple infrastructure and manages bundle configurations

Communicates with Apple's network infrastructure across seven endpoints to retrieve or validate system configurations and service parameters. Manages multiple bundle identifiers and handles file operations related to service data. Performs periodic or event-triggered synchronization with Apple's servers to maintain system state and configuration consistency.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 116.3 KB
UUID: DDB3E2D8-D61E-39BC-A514-D132BACCFA50
Analyzed: 2026-04-07T05:21:17Z
CDHash: 7d24c305ab85e938ed52cdc00ee7b30a01bca9b6dad861e5f75bdf9c4b9286f7

Frameworks2

libxcselect.dylib libSystem.B.dylib

Interesting Strings

Bundle IDs(6)

+com.apple.dt.xcode_select.xtool-shim-public /AppleInternal/Library/BuildRoots/4~B_wqugBHzFFcIP-pAxo4IDm9CBUtDV28t-tQSx8/Library/Caches/com.apple.xbs/Binaries/xcode_select/install/TempContent/Objects/xcode_select.build/xtool-shim-public.build/Objects-normal/arm64e/tool-shim.o /AppleInternal/Library/BuildRoots/4~B_wqugBHzFFcIP-pAxo4IDm9CBUtDV28t-tQSx8/Library/Caches/com.apple.xbs/Sources/xcode_select/src/shims/<string>com.apple.compilers.llvm.clang.1_0</string><string>com.apple.dt.xcode_select.xtool-shim-public</string>

File Paths(2)

/AppleInternal/Library/BuildRoots/4~B_wqugBHzFFcIP-pAxo4IDm9CBUtDV28t-tQSx8/Library/Caches/com.apple.xbs/Binaries/xcode_select/install/TempContent/Objects/xcode_select.build/xtool-shim-public.build/Objects-normal/arm64e/tool-shim.o /AppleInternal/Library/BuildRoots/4~B_wqugBHzFFcIP-pAxo4IDm9CBUtDV28t-tQSx8/Library/Caches/com.apple.xbs/Sources/xcode_select/src/shims/

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surface

Endpoints(7)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

0

File Paths

2

Bundle IDs

6

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code91b48fa868b05ab86ac4ae095bb0bfb8d4dc31a5ed19f4e30242a4a972256335

Importsea874a7839b7c38dcd3108a43d6aa5bf9cb281fb7a0c14493ee35de5ed6c93b8

Frameworksca5a3e49c1980b3a4f1d5f857f1394587c6b2f3927ededa9ddc71fe3ce9fde56

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbolsea874a7839b7c38dcd3108a43d6aa5bf9cb281fb7a0c14493ee35de5ed6c93b8

Static Libraries0 / 4 functions identified

Functions(4)

0x1000006c0main

0x1000006ecmainExecutableToolName

0x100000724sub_100000724

0x100000898mainExecutableToolName.cold.1

Imports11 symbols from 2 dylibs

libSystem.B.dylib10 libxcselect.dylib1

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable