relatived
executablemacOS510.0 KBx86_64, arm64
System service daemon — manages hardware drivers, security credentials, and location services
Provides privileged system services with direct access to hardware drivers, IOKit user clients, and Mach services. Accesses keychain and code signing credentials, manages location data as a system bundle without user prompts, and handles process lifecycle operations. Submits telemetry to Apple's unified analytics system and maintains connections to 8 network endpoints. Exposes 3 XPC services to other system components and applications for querying or controlling its managed resources.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 510.0 KB
- UUID
- 3BBA0714-8D3B-3691-87BB-58E05E9FB648
- Analyzed
- 2026-04-09T10:00:53Z
- CDHash
- 265b212b8c350a4f7d3af10dcb15ad3521949761aa201b75f0e39db1fe4d595a
Capabilities
LocationAccess location as a system bundle (no user prompt)
com.apple.locationd.effective_bundle[object Object]StorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-onlyStorageException: access additional file paths
com.apple.security.exception.files.home-relative-path.read-writeHardwareException: access additional IOKit user clients
com.apple.security.exception.iokit-user-client-classHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-namecom.apple.iohideventsystemcom.apple.locationd.registrationcom.apple.coremedia.admincom.apple.coremedia.capturesourcecom.apple.coremedia.capturesessioncom.apple.coremedia.routingcontext.xpccom.apple.coremedia.routediscoverer.xpccom.apple.coremedia.volumecontroller.xpccom.apple.coremedia.remotequeuecom.apple.server.bluetoothcom.apple.server.bluetooth.general.xpccom.apple.powerlog.plxpclogger.xpccom.apple.airplay.apsynccontroller.xpccom.apple.audio.SystemSoundServer-iOScom.apple.appleneuralenginecom.apple.AttentionAwarenesscom.apple.timesync.expositorcom.apple.timesync.managercom.apple.timesync.ptp.managercom.apple.airplay.endpoint.xpccom.apple.mediaexperience.endpoint.xpc
AnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySystemProcess lifecycle management
/System/Library/PrivateFrameworks/RunningBoardServices.framework/Versions/A/RunningBoardServicesFrameworks21
Entitlements28
com.apple.security.exception.mach-lookup.global-name
com.apple.iohideventsystemcom.apple.locationd.registrationcom.apple.coremedia.admincom.apple.coremedia.capturesourcecom.apple.coremedia.capturesessioncom.apple.coremedia.routingcontext.xpccom.apple.coremedia.routediscoverer.xpccom.apple.coremedia.volumecontroller.xpccom.apple.coremedia.remotequeuecom.apple.server.bluetoothcom.apple.server.bluetooth.general.xpccom.apple.powerlog.plxpclogger.xpccom.apple.airplay.apsynccontroller.xpccom.apple.audio.SystemSoundServer-iOScom.apple.appleneuralenginecom.apple.AttentionAwarenesscom.apple.timesync.expositorcom.apple.timesync.managercom.apple.timesync.ptp.managercom.apple.airplay.endpoint.xpccom.apple.mediaexperience.endpoint.xpc
Interesting Strings
Bundle IDs(119)
File Paths(24)
$/Library/Caches/com.apple.relatived/0/AppleInternal/Library/BuildRoots/4~B_w9ugCIvmRkJdr4tzSXkw0p0-m8NlLhE4WpkRU/Library/Caches/com.apple.xbs/Sources/RelativeMotion/Common/RMConnectionEndpoint.m/AppleInternal/Library/BuildRoots/4~B_w9ugCIvmRkJdr4tzSXkw0p0-m8NlLhE4WpkRU/Library/Caches/com.apple.xbs/Sources/RelativeMotion/Common/RMConnectionListener.m/AppleInternal/Library/BuildRoots/4~B_w9ugCIvmRkJdr4tzSXkw0p0-m8NlLhE4WpkRU/Library/Caches/com.apple.xbs/Sources/RelativeMotion/relatived/RMDataStreamHandler.m/System/Library/Frameworks/AVFoundation.framework/Versions/A/AVFoundation
telemetry(4)
Network Surface
Networking Frameworks
Endpoints(8)
DNA Capability Vector
Location
1
Keychain
0
Network
0
Storage
2
Hardware
2
IPC
1
Analytics
1
Security
1
System
1
Behavioral Profile
URL Endpoints
5
Telemetry Strings
4
File Paths
24
Bundle IDs
119
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 566 functions identified
Functions(566)
0x100001538-[RMAudioListenerPoseEngineClientEntry .cxx_destruct]
0x100001544-[RMAudioListenerPoseEngineSession .cxx_destruct]
0x1000015ac+[RMAudioListenerPoseEngine sharedInstance]
0x1000015f0sub_1000015f0
0x100001630-[RMAudioListenerPoseEngine init]
0x100001a44sub_100001a44
0x100001a54sub_100001a54
0x100001a5csub_100001a5c
0x100001ac4sub_100001ac4
0x100001b1csub_100001b1c
0x100001bb8sub_100001bb8
0x100001bf4sub_100001bf4
0x100001c30sub_100001c30
0x100001facsub_100001fac
0x100002010sub_100002010
0x100002054sub_100002054
0x100002090sub_100002090
0x100002098sub_100002098
0x1000020a0sub_1000020a0
0x1000020e8sub_1000020e8
Imports251 symbols from 20 dylibs
Exports1
_mh_execute_header0x0