ktrace

JSON
executablemacOS408.5 KBx86_64, arm64, arm64

System hardware management utility — communicates directly with device drivers and hardware interfaces

Provides direct hardware and driver communication capabilities for system-level operations. References 32 bundle identifiers and communicates with 10 network endpoints, suggesting integration with multiple system services and remote connectivity features. Implements 177 functions across 11 frameworks including 5 private Apple frameworks. Contains 11 entitlements enabling privileged hardware access and inter-process communication necessary for device management tasks.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
408.5 KB
UUID
96E88913-5217-30E9-BB93-0987D8D26316
Analyzed
2026-04-07T05:21:11Z
CDHash
bc306dd1ddb17ce1a105ea4607c56c94a5bf68c1de16e8868674af6eab22f445

Capabilities

Interesting Strings

Network Surface

Networking Frameworks

API Usage

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
7
Telemetry Strings
0
File Paths
10
Bundle IDs
32
IOKit Constants
0
Library Functions
15

Structural HashesSHA-256

Static Libraries15 / 177 functions identified

Functions(177)

0x100000bd8sub_100000bd8
0x100001064sub_100001064
0x100001068sub_100001068
0x100001eccsub_100001ecc
0x100001f6csub_100001f6c
0x100001f70sub_100001f70
0x100002014sub_100002014
0x100002018sub_100002018
0x1000020bcsub_1000020bc
0x100002308sub_100002308
0x100002344sub_100002344
0x100002350sub_100002350
0x1000023dcsub_1000023dc
0x100002454sub_100002454
0x100002484sub_100002484
0x10000256csub_10000256c
0x100002640sub_100002640
0x100002660sub_100002660
0x100002664sub_100002664
0x100002668sub_100002668

Imports278 symbols from 8 dylibs

Exports1

_mh_execute_header0x0